pfSense

status.php: Omit IPsec if inactive. Fixes #15310

Add Kea info to status.php. Implements #14953

While here, change ISC DHCP info header to include "ISC" and only
include those sections if the config files exist.

Use getter/setters for config access in gwlb.inc

qinq: remove incorrect config access

Improve Setup Wizard error handling. Fixes #15302

While here, clean up some misc PHP syntax I spotted along the way.

Also made sure all error messages are wrapped in gettext()

Fixup wizard pw to reduce diff against issue #15266

Fix setup wizard WAN form field name. Fixes #15301

Update setup wizard WAN JavaScript. Fixes #15301

Update old fontawesome class reference

Add loader.conf.lua to status.php. Implements #15298

Add EFI boot info to status.php. Implements #15297

Remove unnecessary treegrid files. Implements #15265

Encode PHP error log content before display. Fixes #15264

Correct PHP error display issues. Fixes #15263

Change "IP family" to "address family"

Kill matching opposite states when schedules expire. Fix #15252

Prevent the default gateway group from being deleted. Fix #15248

Show interface subnet details for IPsec Phase 2. Implement #15245

While there, prevent interface subnet selections from
showing for the NAT/BINAT field.

Show system alias popups for rules. Implement #15234

Check static intefaces with a pending gateway. Fix #15225

Interfaces with a static configuration may have a pending gateway
status when killing states for downed interfaces.

ACB: Validate+encode frequency value. Fixes #15224

Process downed gateways when killing states. Fix #15223

By the time filter_delete_states_for_down_gateways() is called,
filter_generate_gateways() has already removed downed gateways from the
$GatewaysList array. Hence, states are not killed for downed gateways....

Don't check empty arrays

min() requires at least one element in the array

Remove failover states using only the gateway label

Interfaces were previously specified since the inbound state needs to
be killed (due to route-to) for the connection to restart on the
preferred gateway. This interrupts connections already established on...

Update gateway recovery text

Show negate option in popup for advanced rule options. Fix #15214

While there, reoder the tag text to read closr to
how rules are processed.

Revert "Show negate option in popup for advanced rule options. Fix #15214"

This reverts commit e933a0230e366faa772686447b530a145af06acf.

Show negate option in popup for advanced rule options. Fix #15214

While there, reoder the tag text to read closr to
how rules are processed.

Add scroll when nagivating menus overlfow. Fix #7943

Use the correct function parameters. Fix #15206

Kill states on gateway failover recovery. Implement #855

Sync generated gateways to config. Fix #12920

Remove old state killing colde. Fix #12942

For rc.newwanip, it's redundant to kill specific states before killing
all states. For ppp-linkup, state killing is already handled by calling
filter_configure_sync() in rc.newwanip which is called by
check_reload_status.

Check for empty hosts when generating outbound NAT rules. Fix #15197

Make sure that there's a valid host when calling
filter_nat_rules_generate_if() and add missing new lines.

Remove OpenVPN engine option. Implements #15188

It's been non-functional for years and is only confusing users now.

Per-rule State Policy option. Implements #15183

Adds a setting in the advanced section when editing a firewall rule
which allows a rule to use a state policy that differs from the
configured default.

Fix RA IPsec EAP-RADIUS accounting. Fixes #15176

Set the flag which only activates accounting for connections with VIPs
which will restrict accounting to only mobile IPsec connections.

IPsec P1/P2 delete corrections. Fixes #15171

Explicitly set ddns-updates. Fix #13894

Add option to set State Policy. Implements #15173

Also changes default policy to if-bound.

Add brackets to returned IPv6 nameservers. Fix #15170

Use absolute links in GUI info messages. Fixes #13413

Detect OCI platform

Fix packet captures on tailscale. Fixes #15145

Merge pull request #4664 from opoplawski/no_system_dns

Handle VIPs in OpenVPN Wizard. Fix #15148

Font Awesome: Update to v6.5.1

Consolidate is_url_hostname_resolvable() into resolve_address()

is_url_hostname_resolvable() used gethostbyname() which only
supports getting IPv4 records. This change makes resolve_address()
more flexible by accepting URLs and consumes the timeout code
from is_url_hostname_resolvable().

Clarify function use and description

Refactor system DNS check. Fix #15127

Add IPv6 localhost nameserver to /etc/resolv.conf. Fix #15139

Improve validation of DNS Resolver Python script. Fixes #15135

Update the years in the Copyright notice.

Correct DHCPv6 lease shortcut section. Fixes #15117

Bail earlier if the LDAP connection fails. Fix #15122

Remove broken input validation

This input validation was originally done in a function that effectively
ignored any input errors. When it was taken out of the function, the
input errors were no longer ignored which resulted in false positives.
This commit removes the respective input validation which effectively...

Strip the prefix size from the VTI remote address. Fix #15124

pfSenseHelpers.js: improve usepost interface. See comment.

Remove unnecessary sleep when configuring unbound

Reconfigure VLANs after recreating LAGG interfaces. Fix #9453

Trim DHCP & DHCPv6 search strings. #14261

Fix typo in setup wizard. Fixes #14989

get_sysctl(): check return status and log failures, add retries. #14648

Show only the Message column for raw logs. Implement #15106

Remove TOTH. Fix NG#12636

Handle IPv6 GUA and ULA in get_interface_track6ip(). Fix #15057

Include IPv6 VIPs in system subnet aliases. Fix #15096

Handle backuppath entries with multiple paths. Fix #15076

Fix off-by-one error when checking for system uid/gid. Fix #15067

Check "all" when restarting unbound based on interface. Fix #15071

Use the correct fontawesome icon prefix

Remove bonus space. Fixes #15069

Dynamically adjust login banner interface max width. Fix #13268

Consolidate shaper input validation

Remove the duplicate function and integrate it with the rest of the
validate_input() methods.
do_input_validation() in guiconfig.inc cannot be included in shaper.inc;
this change avoids moving it somewhere that may not be ideal.

Allow disabling RA with no IPv6 config on the interface. Fix #14967

etc/rc.ecl: Update CD/DVD logic. Fixes #14728

Don't refresh the cache when visiting the update page. Fix #15055

Show the target for auto outbound NAT rules. Fix #15025

Append a new line to NAT rule errors. Fix #15024

Update fontawesome references in form buttons

More fontawesomev6 updates

Merge pull request #4615 from blkeller/apu2-expanded-serial-fix

Merge pull request #4652 from jaredhendrickson13/fix/bring-down-proxyarp-after-deletion

Fix IPsec log value handling. Fixes #14990

Refactor use of return_gateways_array() with get_gateways(). Fix #14893

Most calls to return_gateways_array() do not need the gateway list to be
recreated. get_gateways() can filter the gateway list, and indexing is
moved from return_gateways_array() to get_gateways() to avoid using...

Don't split fontawesome icon names

This makes it easier to update fontawesome versions. While here, fix a
missing closing quote, and use the correct fontawesome prefix.

Remove duplicate class

Update fontawesome icon names to v6. Implement #13537

Revert "Update fontawesome icon names to v6. Implement #13537"

This reverts commit 32be4696a301144c650f4765b8a2b51e28d95a40.

Update fontawesome icon names to v6. Implement #13537

Utilize new -C flag to pfSense-upgrade

pfSense-upgrade's -c flag is intended to check only for upgrades against the
currently configured repository (better termed as updates). The new -C flag
expands the search for new versions of core packages into other non-devel repo...

Expand detection of PC Engines APU2 platform to include all variants

Fixes #13498 in Redmine.

Update direct config access in services_dhcpv6.php. Fix #14978

Remove use of 0.0.0.0 alias in pfSense-dhclient-script. Fixes #14966

Remove invalid field from input validation. Fix #14965

Save the mobile IPsec group auth setting. Fix #14963

Merge pull request #4642 from marcelloc/patch-8

Merge pull request #4634 from rlaager/fix-mss-clamping-for-v6-vpn

Merge pull request #4647 from Tsuser1/ecl-cdrom

Merge pull request #4653 from PhilZ-cwm6/patch_ovpn_nbdd