pfSense

route_get() optimization. Fixes #11475

Set correct DHCP failover peer IP on XMLRPC sync. Fixes #11519

Move custom IPSEC NAT-T port settings to Advanced Options. Todo #11518

Set explicit-exit-notify to 1 for new OpenVPN Client instances. Implements #11521

IPsec Mobile users swanctl.conf fix. Issue #11564

IPsec peer ID Any fix. Issue #11555

Cisco AVPair parse {clientip}. Fixes #11561

OpenVPN data-ciphers option length validation. Issue #11559

OpenVPN ncp_enable checkbox fix. Issue #11554

Restart unbound on interface recover. Fixes #11547

IPsec VTI interfaces bootup fix. Issue #11537

WPA Enterprise PAP inner method support. Issue #2400

Show changed NAT timeouts on the system_advanced_firewall page. Issue #11565

Merge pull request #4504 from bashkarev/master

Update services.inc

Corrects the error in the dynamic DNS widget
warning: array_combine(): both parameters should have an equal number of elements in /usr/local/www/widgets/widgets/dyn_dns_status.widget.php on line 151

Fixed bug parsing netmask cisco acl

Basic fiurewall_NAT MVC conversion

Correct location and config for Strict CRLs in IPsec. Fixes #11526

Improve CA/Self-Signed serial handling. Fixes #11514

Try parsing four digit years in cert timestamps. Fixes #11504

Improve handling of broken/invalid certs. Fixes #11489

On save return virtual IP id

Merge pull request #4501 from mschiegl/patch-1

Use set_curlproxy() function for cURL proxy configuration. Issue #11476

IPsec Mobile EAP-RADIUS additional configuration fix. Issue #11447

Put OpenVPN route-nopull option after custom options. Fixes #11448

System Information widget fix. Issue #11443

WireGuard interface friendly description. Fixes #11437

Allow to use OpenVPN provided DNS servers. Implements #11140

WPA Enterprise (PEAP/TLS/TTLS) client mode. Feature #2400

Fix a typo.

No functional changes.

Merge pull request #4491 from dsmackie/issue-9887

Merge pull request #4500 from bitscher/master

Merge pull request #4487 from znerol-forks/feature/master/radvd-linklocal-vip

Don't add empty pools line. Fixes #11488

Fix child SA name generation. Fixes #11487

Fix IPsec connect/disconnect for all tunnels. Fixes #11486

Fix openssl digest algorithm param in openvpn.inc

At least in OpenSSL 1.1.1i-freebsd, used by pfsense 2.5, there is no longer a "list-message-digest-algorithms" parameter. It has been replaced by "list -digest-algorithms".
The old parameter results in an error 'Invalid command 'list-message-digest-algorithms'; type "help" for a list' and may even cause an endless loop on startup/migration.

Fixed #5685 - Renaming alias does not update firewall rules containg that alias

Fixed #11464 by adding proxy configuration to web service calls

Merge branch 'master' into master

Add getVIPs() function for MVC

Revised firewall_virtual_ip_edit for MVC

Fix broken help link.

firewall_virtual_ip refactored fro MVC

Fix filename in copyright message

Refactored system_advanced_misc for MVC

Non local gateways fix. Issue #11433

Show switch tagging ports on status_interfaces page. Implements #10804

Replace HTTP links to HTTPS. Implemets #11228

Delete static routes on gateway down. Fixes #11296

Remove unused L2TP VPN directory. Fixes #11299

Hide MAC address field for pseudo-interfaces. Issue #11387

Authentication Servers copy button. Feature #11390

Unbound ip6.arpa local-zone type. Fixes #11403

aliasmod shell script. Implements #11380

Set correct TCP MSS for IPv6. Fixes #11409

Allow to use host portion of IPv6 in firewall rules. Feature #6626

L2TP VPN MTU option. Feature #11406

Xen console support. Feature #11402

Display negotiated cipher on Status / OpenVPN page. Implements #7077

Hide Shared Key field on OpenVPN client page in SSL/TLS mode. Fixes #11382

Mythic-Beasts.com DynDNS provider support. Implements #7842

RADIUS Advanced parameters. Feature #11211

Do not prefix FQDN IPsec IDs with @. Fixes #11442

Show gateway groups in OpenVPN Wizard. Fixes #11141

Check that DHCP has gateway in interface_has_gateway(). Fixes #5135

Randomize ACB cron minutes. Implements #10811

RADVD set AdvRDNSSLifetime. Fixes #11105

Down disabled interfaces on boot. Fixes #11091

Do not restart unchanged services on XMLRPC sync. Fixes #11082

Improve the handling of crypto offload hardware.

Remove support to deprecated hardware.

Task: #11426

Find IPsec IKE SAs by their full name. Issue #11435

Find IPsec IKE SAs by their full name. Issue #11435

Update comments

Provide system_advanced_firewall.inc

Revised system_advanced_notificaions for MVC

Merged system_advanced_network for MVC

remove obsolete system_advanced.inc

Fix hnaltqenable setting

Split system_admin.inc into separate files per tab

Fix custom XMLRPC port for Captive Portal. Fixes #11425

Completed networking section, subject to testing

Add IPv6 support for Gandi LiveDNS dynamic DNS handler

• Simplify the use of the LiveDNS API by using another API call that
  handles both creating and updating for a given name and record type
  instead of the former two step operation that was fetching the whole...

Add input_errors to returned array

Revised system_advanced_notifications for MVC

Fix WireGuard add/next name behavior. Fixes #11407

• No need to set index when creating a new entry
• WireGuard interface name label was assuming array index=wg if name
  which was incorrect

Handle case where copyright file is downloaded but has a size of zero

Revert copyright symbols

Add option to set IPsec filtering mode. Implements #11395

User can choose between filtering enc (tunnel+VTI) or filtering on
assigned VTI interface tabs (VTI only, drops all tunnel mode traffic).
See https://redmine.pfsense.org/issues/11395 for details.

Fix Microsoft's idea of an apostropphe

Increment requested copyright version

Revise copyright modal to accommodate larger content

Use Netgate domain for bogons. Issue NG 5446

Detect Plus by product label

Rename Factory -> Plus

This file moved, remove old copy. Fixes #11389

Revert "Refactor system_advanced_misc for MVC"

This reverts commit c33b0ab6c2fcd4c9786d1b5e7903c01fa1fafa7d.

Refactor system_advanced_misc for MVC

Typo