pfSense

Detect old workarounds in config upgrade and deal with them

Bring upgrade_166_to_167() to 2.3 world

Move workaround used to enable pkg metadata update cronjob to a generic mechanism

Check if specific config upgrade code already ran and skip it

Add a function to be called every time convert_config() runs

Hide dashboard update period control. No longer needed with central refresh system

(cherry picked from commit 5e024279579ec76486f7cff713eecdb83611ed37)

Convert firewall logs widget to centralized refresh system

(cherry picked from commit a8c2e827cfeaf74bc99227e087584eefb2c466f2)

Revert config version to 15.8 and remove upgrade script

(cherry picked from commit d800d0f5babe2f6d7bb9a7de8afa709c28e930df)

Add thermal_sensors.inc file to obsoleted files list

(cherry picked from commit ef68bfa699f7fb1c68cb502dbe23ed3546b94b20)

COnvert thermal sensor widget to central refresh system

(cherry picked from commit 032f6a8963a51195946b6a823967d31af5fffbe0)

COnvert dyndns widget to central refresh system

(cherry picked from commit 5efa7cae2f2df4974c7de19f00fe5b669fb73485)

Added refresh icon to version display

(cherry picked from commit b7a42d09d7ef010b34d6570fb5398b4f98f397b2)

Add refresh icon to system info widget version display

(cherry picked from commit 1557953af1d3a47bc508986688f0b285fa2b43e1)

Refresh cache every 2h when using GUI

Make sure pfSense-upgrade return code is obtained instead of tail's one

Add a workaround to register rc.update_pkg_metadata cronjob on 2.3 since config version cannot be bumped

Show user when pkg metadata was updated

Update cache when GUI successfully update pkg metadata

Consider only last output line

Speedup get_system_pkg_version() considering only installed packages

Use cache file to show pfSense version information

Save pkg update return code

Run rc.update_pkg_metadata in background when repository changes

Remove dead code using in the past to migrate from pfSense-repo-devel to a single pkg called pfSense-repo

Make sure pkg metadata is updated at least once daily. It will be used to speedup GUI parts related to pkg update

System info widget prepared for background version checks

Re-wrote ipsec widgt to return JSON formatted AJAX data

(cherry picked from commit 067109d9fd64d8958408c7f9aaf30523319be91a)

First part of dashboard update system

(cherry picked from commit 8f3a49d7e9c22af2c97f92007aa23d2a45c8e697)

COmpleted conversion of dashboard widget to ventralized refresh system

(cherry picked from commit fe0eb5b1112791cf28e98e00757c4645d6b9234a)

Put the FQDN first in /etc/hosts to make dnsmasq happy when reverse resolving hostnames. Make a special exception for localhost. Fixes #7771

(cherry picked from commit 0e78c2f544ad577234a0a2f87ce2e8caefdfdb77)
(cherry picked from commit de7d6cb87d600c6e093aa3e9f76246fe62824ac7)

Adding widget and login css files

Add Netgate Services and Support widget

(cherry picked from commit 179991b76e7a330a98ea520531551dfd6befb0b3)

New login design back-ported from 2.4

(cherry picked from commit 1605d94079fed5822ef1069eee05541d0ebc20ca)

Use an alternate method to stop unbound and fix #7326

(cherry picked from commit 782453b4dbb77e5bc97a43f56b95a006c5434d65)
(cherry picked from commit 67fea036201f5af338338f6113033574ec25777e)

If a client address is in the webConfiguratorlockout table, do not allow them to access the GUI. Print an error and kill their states. Ticket #7693
Extra check to be sure that an existing open state cannot bypass lockout controls.

(cherry picked from commit cc9b0f76da4936ac7510eee6cb5e0574d11b5973)...

Fix typo

(cherry picked from commit 2c3b9ac554cc3940962e7f9b1799857583c394ab)
(cherry picked from commit 930914fd813130b0d1bd8af2ff09e6832a5e7862)

Restructure how unbound zone data is written to fix processing of "redirect" zone entries. Fixes #7690
Also corrects some other misc issues for formatting of zone data.
While here, add an option, not exposed in the GUI, for users to get the previous behavior of defining short names for hosts....

Improve the way the auth server list is generated and account for a key being removed from the array when deleting. Fixes #7682

(cherry picked from commit fa628b1a15a1c03343caa2735e09de291ae4e382)

Removed MSS clamping exclusions

(cherry picked from commit 53c26adecad735f7a015466dbbcba3f22655a902)

Several complaints of unbound problems after commiting, so back this out. Revert "Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326"

This reverts commit 863804a917987ea10993433c84399b5711c3c352.

Fix missing line from openssl.cnf

(cherry picked from commit c369871083ee6a5be958129df5457c8e952aa9e2)

Include User Agent information when update bogons list

Remove extra spaces from User Agent

Send uniqueid instead of UUID on user-agent

Declare user_agent variable in the function it's used

Move uniqueid read to a function system_get_uniqueid()

Change the way unbound is stopped when the process is being restarted, to give the old process enough time to exit cleanly. Fixes #7326

(cherry picked from commit 38d110824c87ff60c6289c0432d55009586ceee4)

unbound-control needs to know the config path or else it can't work properly. Fixes #7667

(cherry picked from commit 8a0aa42c197361ebb82387e5bdc8378e5440837f)

Set a value for this variable in each case, so a previous value isn't re-used in a loop.

(cherry picked from commit faab657a256f9385d5e0ffb4084666e760b515a5)
(cherry picked from commit 86ab9eb54b30b591703e752ceca047d202b76332)

Update diag_gmirror.php

Fix typo

(cherry picked from commit 55588e0ce32865568522e0afd0b577fdfabd3b74)

Issue #7659 foreach warning on adding gateway RELENG_2_3

Signed-off-by: Phil Davis <phil@jankaritech.com>

Fix interface groups link

(cherry picked from commit c0dd390b666d86b6b9ea61438c95b1370adda052)

Use recently added hwaddr field to restore original MAC address

Removed htmlspecialchars when loading leases from config
(cherry picked from commit 2322e9f3cb6dea9203d63a17c6a27de3a2c6b8bc)

(cherry picked from commit b4ff414aef9f43dce0931974dd18e28a19cdadda)

Add missing break for cloudflare case
(cherry picked from commit d900381c9384676462c91c0b2e7e59ec42723237)

(cherry picked from commit 2c4865e3fa05cf589891304933fa414a58381261)

Integrate various cloudflare changes
(cherry picked from commit 5ce6ce4b1ad850e70d5a2fe218317b1a1b545907)

(cherry picked from commit 543ea703f2dd41e53a746772332eb83bfb8ead3e)

Add more checks to eliminate empty config tags in package settings. Fixes #7624

(cherry picked from commit de147d3d614c877df2022d85d37256a93047764c)

pkg_edit, fix empty config tag check

(cherry picked from commit 6bf2a65086f7664c870a9565b70c39655c2a3dcf)
(cherry picked from commit eb65e543b4d04b29ee494fe8d3710213e0fddf23)

Change paid support help link to new support URL

(cherry picked from commit 16bf962333c3897170defb6bf95a2d69c7fdf506)

virtualips, ability to sort the table

(cherry picked from commit 77c53e65fb7d4f40baec5c01a796a637c9cc5034)
(cherry picked from commit 3af287f33a0ccf9de34e6dab8d1284c584ed0b37)

Diag DNS disable Add Alias button when host field is changed

(cherry picked from commit 45eafdbd7b958bd4f9459d90a6a63ff8202eec3b)
(cherry picked from commit 2e294992e4151a80a7d57aa4afabc12b9375539f)

Diag DNS fix update alias button text after add alias

1) Lookup a name with Diag DNS
2) Press "Add Alias"
The alias is added, but the button still says "Add Alias".

Actually the alias exists by now. The button should say "Update Alias".

Fix: once we have emitted the alias create/update success message, we can set $alias_exists true so that the rest of the code is based on the (possibly new) state.(cherry picked from commit 474b275684950ab8215b449987d4cbece005f9ed)...

Diag DNS do not show Add Alias if no priv to add alais

(cherry picked from commit 7fcccc8f09afd7f4a524ff598b43e15d678905eb)
(cherry picked from commit f54a3ede59ee819500f272ea87b244b7ab949e41)

Diag DNS do not create an empty alias if name does not resolve

(cherry picked from commit f445385114c43cb46b8188a7cea425648f7647f2)
(cherry picked from commit 14e90f2e5d34ca34cf226ece4f8fcb4fb6c943fa)

Remove stray debug-code (/tmp/script)

(cherry picked from commit a29361a2d94eed754255e75d63d511e7889d6c9f)
(cherry picked from commit 12ca33f4dc915c37eeee4b6b86c7daa399fdad91)

Fix net.inet.ip.random_id tunable description (Bug #6087)
(cherry picked from commit 77408e612de12311d9fd517b2de2de586f4c0ddb)

(cherry picked from commit df0b717d364ac3743ae6161cde312157fefe781d)

Fix APU2 with coreboot v4.x detection

See https://forum.pfsense.org/index.php?topic=106444.msg716558#msg716558
(cherry picked from commit 9457d0f616506bf0e50e49d7d977ebc1aa945e4f)

(cherry picked from commit 7ba3a0208039b80996374140a8e2a8bc4d16ff8d)

Make consistent rule information section

(cherry picked from commit f0dc8b688c2b7d973bc18769579ee8cc6d3d2dad)
(cherry picked from commit 4c4504b1e785396d92be853072a9c557c55b3c4a)

Use is_numeric() to make sure $prefix is not 0

Update interfaces.inc

Not defined pid file on starting choparp. The pfSense may not kill the program to reconfiguration.
(cherry picked from commit 7d316581f4bf05613a556867b1154e4b5b842b1a)

(cherry picked from commit 22b18e3641aa9b0d23a33d66cee54a04f19401e9)

Request PD even if no interfaces are set to track6 (Bug #4544)

See https://redmine.pfsense.org/issues/4544#note-4
(cherry picked from commit b0837cebf9836c4cdd5873b3e463f1afb8403811)

(cherry picked from commit 8740bd5ed417bbfc26fb57f35aa6bd74f737e4a5)

Update dyndns.class
(cherry picked from commit 61c813f96de90e07bb63075847dabc041a5560b8)

(cherry picked from commit 0673b7b8eccfdd1d7aa8bd56de2ed6ba785a5370)

Match whitespace after $vhid when checking CARP status to avoid partial matches. Fixes #7638
While here, fix variable references with braces and combine the two calls to grep into a single pattern.

(cherry picked from commit fd4e14b8853e7a30ee23532d686270cb40d84d03)...

Add input validation for interface names on firewall_nat_edit.php and fix encoding of the interface name in dst_change. Fixes #7651

Fix handling of the 'type' parameter so it is validated and encoded on diag_table.php. Fixes #7652

Prevent the filename from being used to run XSS in the diag_edit.php file browser. Fixes #7650

Restore the captive portal feature to view the captive portal page directly from the portal web server. Add this as an additional button so both methods are possible. Fixes #7646

Redact BGP MD5 password/key in status output. Fixes #7642

(cherry picked from commit aa18c5b9b62e110ebf88fbb24c39c2a13813bd89)
(cherry picked from commit 4122033534b5dd927cd5678cbe8b00267438dd44)

Don't remove examples from packages as obsolete, some packages rely on the files being there.

(cherry picked from commit 835d8b72effa274b5e2733f219fde00fee60f8e3)
(cherry picked from commit be263d6c8b0e1f6c4ea714b1f1625e53e8cd270d)

Fix DNS wildcard support for Loopia

Fix for the problem that wildcard CNAME records disappear from Loopia when doing a DNS update. As discussed here: https://forum.pfsense.org/index.php?topic=67793.0

Add download button/function directly on status.php to ease confusion.

(cherry picked from commit f7a72733f8c482e230e0042a6c65f4935a2b723a)
(cherry picked from commit b44ee60da886ae7eb7862d298d8018e94515d945)

Add NGID to status.php

(cherry picked from commit fcc24426ab16b02ffc77bc7c9ee040d76dd987a2)
(cherry picked from commit 2e7f67b274960210ef2d606f72b7bfee22c1b1c7)

Backport changes for syslogd handling to fix #7256

(cherry picked from commit 576cbe26c184734e93f59320d43aeb2e510c9804)

Backport syslogd service definition/control to RELENG_2_3. Ticket #4382

(cherry picked from commit 5917696ded82c3343d52c03b850d4ce564a159b4)

Add "netstat -nWx" to status.php output

(cherry picked from commit 6252b47062a3bf2be19a43be480fd0acd56b75d0)
(cherry picked from commit 5479efd16933d28d697b499b1229a49554b8a645)

Only cache CP RADIUS Auth credentials when reauthentication is enabled. Fixes #7528

(cherry picked from commit d4e42c54a2b7d9c955b11ad3034a186a73159f1a)
(cherry picked from commit ed44d5fb36f1f69196417e3feab2a9d6df4a47c8)

Welcome pfSense 2.3.4-RELEASE

Fix #7508 stop write_config after reset_factory_defaults

(cherry picked from commit 3dcaae882cdfdd86826be4db9b38ce04389701ec)

Typos in pkg management code comments

(cherry picked from commit 146dbf0139d1f3049131bdf7a7d96675e4ff00a4)

Let he user know if all selected interfaces are down

in the interface statistics widget.
At the moment, if all the selected interfaces are down, the widget will just display no columns. That will make users wonder what happened.
(cherry picked from commit b22fceb2d7973b8c80a55b4ec492819ddd5ae9f9)

Fix interface down in interface statistics widget

If an interface is down, the widget would write the interface description in a column heading but then omit the stats items. So later columns (to the right) would have the headings and stats items out of line....

Redmine #7318 None button for widget filters

(cherry picked from commit fba53b438540eb544c43adf4598e07320a910347)

Handle widgets having no items selected for display

(cherry picked from commit 405dfaad144de90a6e401354b80b82baf5ae3d59)

Remove bonus end td tag in interface statistics widget
(cherry picked from commit 9795332b0e101b4c500c3c75a8ea02325364fc17)

Work around broken wizard rules for ticket #7434

Make sure that array exists before using foreach() (Bug #7399)
(cherry picked from commit ce348731b63ea6980dc4f652e76d7c8c7432544c)

Spelling

space/tab

Add Netgate ID display to system info widget

save uniqueid during boot