pfSense

Improvements to ramdisk functions for improved handling on ZFS

PKG_DBDIR/CACHEDIR should be accessed at /var/db/pkg and /var/cache/pkg in all cases

Revert "Fixes RAM disk handling on ZFS (support boot environments)"

This reverts commit e6b47d6812b1a46738c75a8991cd1393b200d7ef

Fixes RAM disk handling on ZFS (support boot environments)

Revert "Fix RAM disk support for ZFS layout changes related to BEs. Fixes #13182"

This reverts commit b9097e4cfe3fcbdec86a00a5a470d93d05ea8102

Captive Portal pipes reserve fix. Fixes #13204

Generate floating rules with "any" interface. Fix #13203

Fix RAM disk support for ZFS layout changes related to BEs. Fixes #13182

Do not force setting a gateway with floating match limiter rules. Fix #13027

Incompatible OpenVPN P2P option note. Issue #13189

Captive Portal hostname pipes delete fix. Issue #13193

captiveportal: Only apply per-user default bw to pipes for user auth. Fixes #13192

captiveportal_pipe_configure() was unaware of the context of the pipes it was
creating (user auth vs. allowed mac/ip/host), and always applied the default
pipe bandwidths in the absence of form specified values. This change allows the...

captiveportal: Correct errors in passthru mac deletion. Fixes #13192

Correct identifier mismatches in captiveportal_passthrumac_delete_entry()
($hostent vs $mac)

Correct and rename captiveportal_get_dn_passthru_ruleno() to
captiveportal_get_dn_passthru_pipes. This function was called to retrieve a...

Revert "Destroy deleted/disabled IPsec SA. Fixes #13102"

This appears to be causing a pileup of swanctl processes on systems with
a significant number of disabled tunnels.

This reverts commit d90552c59e51fb13c712b6a96a51ca2462424156.

Remove orphaned ram disk backup script

Fix pf rule for 'any' proto. Fixes #4259

Delete temporary route file on OpenVPN client disconnect. Fixes #13145

Close earlier to avoid overlap. Fixes 12870

Gather the information we need from curl and close the handle earlier
rather than passing around the handle unnecessarily. This avoids
creating multiple overlapping curl requests that don't share a handle.

Merge pull request #4586 from luckman212/outbound-nat-remove-colon

Fix rule label order and optimize. Fixes #13155

• Changes rule label order so the user label is first when present
• Clean up related redundant/suboptimal code along the way

Merge pull request #4585 from luckman212/fix-status-dhcpleases-wrong-ifname

Merge pull request #4583 from luckman212/add-restore-dashboard-layout

Merge pull request #4588 from luckman212/fix-infoblock-placement-firewall_nat_out.php

captiveportal_ether_delete_entry() anchors/pipes delete fix. Issue #13169

DSCP usage optimization. Fixes #13178

captiveportal_passthru_delete_entry() -> captiveportal_passthrumac_delete_entry(). Fixes #13175

User Mgr scope icon corrections. Fixes #13174

Port Forward Redirect target IP save fix. Fixes #13171

fix infoblock placement on firewall_nat_out.php - redmine #13164

Ensure same type comparison. Additional fix #13059

mkdir before restoring extra data. Fixes #13157

ovpn-dnslinkup: do not set interface routes for DNS servers

If the OpenVPN server provides DNS server information (and 'Pull DNS' is
set) we add these DNS servers to our DNS configuration.
That's fine, but we should not add interface routes for these DNS...

check_dnsavailable() improvement. Fixes #13162

Print correct pkg name. Fixes #13163

pfSense: Fix missing global decl in captiveportal_get_last_activity. Fixes #13147

Fix JS for mobile IPsec disconnect. Fixes #13131

Captive Portal per user bandwidths fix. Issue #13150

remove colon to stay consistent with the rest of the GUI

Cleanup PPPoE VIPs on interface down to fix IP address order. Issue #11629

pfanchordrill Captive Portal anchors support. Fixes #13142

Adapt OpenVPN widget to new output. Fixes #13129

Captive Portal host remove fix. Issue #13146

ssh-keygen check improvements. Fixes #13139

Add default value to $ipv6type argument of restart_interface_services(). Fixes #13134

add option to restore dashboard widget layout

fix for https://redmine.pfsense.org/issues/13127

Cleanup PPPoE VIPs to fix IP address order. Issue #11629

Remove topology keyword from openvpn_cc file. Fixes #13133

OpenVPN status improvements. Implements #13129

• Clean up and improve client/p2p state interpretation
• Output OpenVPN instance interface names
• Improve formatting of service status and control icons

Revert "Revert "Remove the leftover pfSense-installer repo if it exists""

This reverts commit ae40f82dc7bdc2cbef8a22ee682ec97e5a69fbd8.

Bring this back in now the build puts the file in /tmp and cleans up
after itself properly

Use dnctl(8) to control limiter rules. Feature #12579

Remove duplicate SSHDATA tag. Fixes #13132

Allow to assign L2TP VPN server interface. Issue #13099

VPN restart on Gateway options change. Issue #13076

Revert "Remove the leftover pfSense-installer repo if it exists"

This reverts commit 2f5b8f48de1875c128e05267b0f7d59075c781c4.

This breaks the build since it removes the file too early

Remove the leftover pfSense-installer repo if it exists

Merge pull request #4581 from kris-anderson/feature/relax-dhcp-input-validation

Merge pull request #4580 from luckman212/trim_static_dhcp_mac_on_save

Merge pull request #4579 from luckman212/store-dnsmasq-opts-as-base64

Merge pull request #4578 from luckman212/warning-for-recursive-sshd-disable

Merge pull request #4584 from luckman212/fix_tcp_udp_nat_rdr

Restart DNS Resolver after OpenVPN config save. Fixes #13117

Suppress php warning when using unlink. Fixes #13112

pfSense: Correct typo in buffer_rules_load 'labels' -> 'label' - R12977

fix for https://redmine.pfsense.org/issues/13126

pfSense: Get rule descs for syslog.inc via pfSense_get_pf_rules() - Regression #12977

Correct CP status function call. Fixes #13123

Correct CP status function call. Fixes #13122

more spelling fixes

more accurate error message

fix a spelling mistake

max dhcp lease can be equal to the default lease

Improve OpenVPN "tls-client"/"pull". Fixes #13116

"tls-client" and "client" are redundant, so only use "tls-client" and
"pull". Omit "pull" in cases where it is known to be incompatible.

pfSense: Utilize pf captiveportal funcs from php-pfSense - Feature #12945

Use mpd embedded bandwidth control to reconnect. Fixes #13092

store dnsmasq custom_options as base64

trim mac address when submitting

eases copy & paste which sometimes grabs a little extra whitespace
on either end -- previously caused input validation to fail

Destroy deleted/disabled IPsec SA. Fixes #13102

Port Forward input validation fix. Issue #4259

Captive Portal remove unused ipfw code. Todo #13100

Captive Portal ipfw->pf transition. Todo #13100

add warning for menu option 14 when it might kill your connection

Fix error handling in pfanchordrill. Fixes #13106

USB NIC handling improvements. Fixes #12606 #9393

Reload static routes on L2TP VPN client connect. Fixes #13099

Update config 215 to 216 fix. Issue #13097

LDAP authentication extended query fix. Issue #13093

Add no noretry to PPPoE mpd configuration. Fixes #13092

Traffic Shaper Wizard bandwidth scale fix. Issue #13086

Fix typo. Issue #13076

Slack Notifications fix. Issue #13083

Slow rule generation regression. Fix #13049

Optimize stacked IP Aliases reconfiguration. Issue #12961

OpenVPN Enforce key usage option typo fix. Issue #13056

Port forward NAT rules with Any protocol. Implements #4259

Restart L2TP VPN on interface change. Fixes #13082

Reconfigure stacked IP Aliases on XMLRPC sync and Virtual IP change only. Fixes #12961

OpenVPN Enforce key usage option fix. Issue #13056

ddb.conf: log registers

When we crash also log the register values. They may contain useful
hints for debugging (especially if the unstripped build artefacts are
still available), and take up very little space in the textdump.

Reload IPsec and OpenVPN on gateway IP or force_down option change. Issue #13076