pfSense

Reload mobile IPsec on gateway failover. Fix #15685

Fix parsing for ACB change reason. Fix #15711

Fix it by delimiting on the last occurrence of the delimiter.

Always use the highest existing zone ID when creating a new one. Fix #15772

Apply removed route changes to secondary HA node. Fix #15795

Specify the interface when applying static route changes during OpenVPN reloads

dhcp: give dhcp daemons a chance to shutdown before restarting

Revert "pfSense-rc: Relocate the removal of /var/run/booting to the very end"

This reverts commit 21063272df73ef90bb060449a7baca83b2a8f5ed.

Replace lingering /var/run/booting checks with `is_platform_booting`

Skip DDNS on disabled interfaces. Fix #15802

Fix NTP pool DNS note. Fixes 15552

pfSense-rc: Relocate the removal of /var/run/booting to the very end

Add more detail to config path warnings

Fix some config path warnings

Decrease the number of config requests when deleting filter rules

Only import the Netgate Installer settings when trigger_initial_wizard is set.

Remove the references to 'trigger_virt_setup' since it is not used on CE.

Fix OpenVPN CSO options upgrade

Previous config versions set these options in the config but only
considered them enabled if their value is 'yes'. The enable detection
is now based on the existence of the option.

DynDNS: change Porkbun to use api.porkbun.com instead of porkbun.com

Changes the dynDNS provider 'Porkbun' to use the domain `api.porkbun.com`
instead of `porkbun.com` as accessing the API through `porkbun.com` will
cease to work December 1st. They informed customers by email of this...

Merge pull request #4704 from GChuf/removePragmaHeader

Merge pull request #4705 from GChuf/disksCookies

Fix PHP error when saving PPP settings without an interfaces selected

Configure routes after DHCP WAN during boot. Fix #15791

pfSense-Installer: Import the network settings from the Netgate Installer.

Read a JSON file with the Netgate Installer settings on the first boot and set
up the LAN and WAN.

Ticket: #13129

Use minified nvd3 vendor files. Implement #15782

Add minified nvd3 vendor files

Remove unnecessary config_init_path() calls

Reduce config fetches when displaying filter logs

Also show system aliases when listing all aliases

Improve system alias descriptions

Silence alias errors with ruleset generation while booting

Dynamically-configured system aliases can be set up late in the boot
process. Silence related alerts during ruleset generation while the
system is booting. Once bootup is complete, reload the filter again...

Interface group member validation/encoding. Fixes #15778

Fix rule generation and display for system aliases

This is a followup to 52e512c0555d9f5a91732907e524364358d3f70c
- Update system alias comments and descriptions.
- Improve reserved aliases processing.
- Use alias_info_popup() code when possible for system aliases....

Remove additional cookie config from disks.widget.php

Remove deprecated pragma header. Implement #15781

This removes adding pragma header which is now deprecated. Cache control is used instead.

Reserved table names are lower-case

Update related comments while there.

Bump config version

Introduce function to detect and resolve conflicting aliase names

Expose system aliases to the GUI. Implement #1979

Refactor system_alias_info_popup()

It now supports any alias name. Additionally check for html characters.

Refactor get_alias_list()

It now uses CSVs for multiple types instead of an array.

Fix NTP DNS resolution option for pools. Fixes #15552

Merge pull request #4695 from Self-Hosting-Group/remove-interface

UPnP IGD & PCP: Improve descriptions

Improve error message for duplicated aliases

Merge pull request #4696 from lriley2020/edit-menu

Clarify console menu option 0 description. Implement #15705

Merge pull request #4700 from GChuf/sameSiteCookiesAttribute

Add samesite attribute to cookies. Implement #15729

Adjust widget refresh intervals

Now that the refresh interval works as expected, decrease the refresh
frequency to more closely match the previous behavior.

Display correct bandwidth usage. Fix #14933

Merge pull request #4683 from FloFaber/improve_alphabetic_interface_sorting

Allow apex records for Azure DDNS. Implement #10000

Allow apex records for name.com DDNS. Implement #14289

Improve code readability for DDNS checks

Sanitize RFC2136 key data in status output. Fixes #15490

Merge pull request #4699 from GChuf/logWidgetFix

Merge pull request #4698 from GChuf/thermalSensorWidgetImprovement

Merge pull request #4697 from GChuf/WidgetRefreshRework

Refresh widgets at specified intervals. Fix #15725

Remove old code references in thermal widget

Originally removed in https://redmine.pfsense.org/issues/5369

Improve thermal widget refresh code. Implement #15728

Only replace values instead of entire DOM elements.

Display seconds in firewall log widget

Respect user-specified interval for log widget. Fix #15373

Config access regression. Fix #15762

kea: fix service restart shortcut

Clarify error log when omitting gateway from ruleset

Correct Mobile IPSec Attribute IDs. Fix #15755

Fix admin reset password conditions. Fixes #15751

Clean up diffs

dhcp: ensure $pconfig is never null or not an array

rc.bootup: support deferred package installation scripts

kea: filter self-signed certs from TLS options

Print motd-passwd when it exists

Add package hooks plugin_xmlrpc_send plugin_xmlrpc_recv, and plugin_xmlrpc_post_recv

Repeat optimization made for product_name

Save the product name on /etc/product_name at /etc/rc.banner.

This way we do not need to run PHP again on rc.initial to read the product name.

This file is only written if /etc is writeable, if /etc/product_name does not exist the old (and slow) PHP code will run....

ip_range_to_address_array() 32-bit ARM fix. Issue NG #5445

(cherry picked from commit a6ee0ff91086ba153cfd485dc8fb6d72f918d78b)
(cherry picked from commit 0f5485a49ed4da33bf48f1053be3671d7f08dd09)

Identify Azure more accurately.

Gen2 smbios info is indistinguishable between Azure and Hyper-V

Initialize the PHP settings a little bit earlier so PHP is ready for pfSense-upgrade.

Fixes #13726 in more detail (and for 22.05.1).

ddb.conf: fix script length issue

We need to re-arrange things a little to avoid the maximum script length of
128 bytes.

While here also re-order the different commands a little. Present the likely
most useful information first.

Don't unnecessarily remove the config cache

Removing the cache is no longer necessary; the behavior remains the
same without removing the config cache.

Add safety check for alias ID

Add check for empty interface

Callers may call get_real_interface() with an empty interface;
bail early if so.

Tighten DHCP client rules. Fixes #15702

Avoid config access with unknown userid

Handle empty variable

Callers of these functions may send null variabes; bail early if so.

Fix input validation for gateway

Set the working directory before checking unbound config. Fix #15723

Improve localhost DNS checks. Fix #15722

Include GUI logout in auth log. Fix #15719

User logouts do not need to be as loud as user logins. Include
them in the auth log but make them quiet for the console.

Allow adding package menus with different sections

A package may have multiple menus with the same name but
different sections.

Improve thermal widget readability

Add a margin between progress bars and sort sensors.

Theme the progress-bar color in pfSense-dark

Additional safety checks for explode()

See 8c81cad531b1dd43a6514604091b3c4a6932d715

Add config path check when creating a user

Don't do ACB uploads while the system is booting

Fix indentation

Style guide is to indent using tabs.

Fix config paths with leading slash

A single or a leading forwward-slash is not supported.

Skip ppp modem interfaces where appropriate

Refactor automatic EDNS. Fix #15704

The change adds handling for empty active interfaces. Additionally,
support passing an interface list to allow unbound config testing
based on the desired config rather than the currently active config.

Additional safety checks for explode()

See 8c81cad531b1dd43a6514604091b3c4a6932d715