pfSense

Revert "services_dhcp.php: cleanup warning notice when DHCP relay is enabled"

This reverts commit 564905382d696ef80b45e7552f4fdc502a7d2053.

Revert "services_dhcp.php: just hide relay-enabled interfaces"

This reverts commit 7a1d5e27022fb7183e8a7b17b5514169cbd7ecc7.

Revert "dhcp: support simultaneous v4 dhcpd and dhcrelay, Implements #14620"

This reverts commit e9577ebfd7852646a66697a3bde41b712687a4ca.

Add Next Hop info to status output

Allow legacy PKCS#12 export to function (for now). Fixes #14635

Refactor translation target for outbound NAT

Refactor display of special networks

Allow use of interface groups in firewall rule source/destination fields. Implement #14448

Refactor usage of special networks
Pre-requisite for easier implementation of interface group in firewall rules.

Use the correct index when saving rule separators. Fix #14619
Also fix displaying rule separators with an out of range index.

services_dhcp.php: just hide relay-enabled interfaces

Clarify IPsec Keep Alive description. Fix #12762

dhcp: support simultaneous v4 dhcpd and dhcrelay, Implements #14620

diag_edit.php Improvements. Fixes #7589

Fix Captive Portal view HTML link param. Fixes #14598

The way the code regex matches the parameter it needs the extra bit on
the end so it both matches the regex and gets the target parsed out.
Also this makes it consistent with the other links in the section.

Add dynamic DNS support for Porkbun DNS, closes #14402

Signed-off-by: Nita Vesa <nita.vesa@elektrik.link>

services_dhcp_relay.php: introduce proper shortcut section for dhcrelay

services_dhcp.php: cleanup warning notice when DHCP relay is enabled

Restore and continue to support dhcpleases6 until Kea migration is complete. Fixes #14502

dhcpd: re-add devfs to dhcpd chroot (BPF needs it)

dhcpd: remove unnecessary paths from dhcpd chroot

Don't fetch contents of nonexistent URL aliases. Fix #14574

Validate all URL alias types when expanding URL aliases. Fix #13068

Correct JS for bulk rule copy convertif. Fixes #14576

ipsec: correct typo in var name when modifying p1s

/etc/inc/syslog.inc: Update accessor method formatting. Fixes #14563

ipsec: refactor config access

Fix static ARP interface check. Fixes #14374

Update util.inc

Add additional check to correctly display "Alias-on-CARP"-style Virtual IPs in Gateway Group VIP dropdown selection. Fixes #14524

Add page title to system_register.php. Fixes #14462

Use correct per-log settings path. Fixes #14545

Improve GIF/GRE interface handling. Fixes #14549

Encode dynamic log if filter. Fixes #14548

Multiple issues with PPP providers. Fixes #14547

• Update code for PHP 8.x
• Fix connection name handling (validation, parsing, etc)
• Fix output encoding of plan data

Tested with a variety of countries/providers/plans, output looks OK in
all cases I've checked.

Add option to invalidate GUI login on IP address change. Implements #14265

Bump to 2.8.0-DEVELOPMENT

Fix invalid log rotation setup test. Fixes #14517

firewall_rules.php: default to the first configured interface, Fixes #14345

firewall_nat_out_edit.php: fix invalid format string on Polish translation. Fixes #13946

Add "ixv" to the list of capable ALTQ interfaces.

Ticket: #14408

Correct ambiguous Unbound TTL Host Cache descr text. Fixes #14358

Read pkg plugins more carefully. Fixes #14474

Don't use LED functions without the expected LED count. Fixes #14482

Add the pfSense Plus pkg fingerprints.

Fixes the upgrade from CE now that CE can verify the Plus packages.

Submitted by: KrisM

Use the dynamic repos help text instead of the old 'custom' repo.

Remove the old 'pfupdate' endpoint support.

Disable the support for old style 'custom' repo.

The Plus migration will be handled by the dynamic repos now.

Use the new notation from 877e6b53c7e76f0bcb02621d290a4e325941fd1c.

No functional changes.

Add the missing 'pkg_repos_path' global.

Rerported and tested by: KrisM

Fix a merge problem in the last commit to accommodate a small difference with Plus.

Add the dynamic repos support.

Load the repository settings dynamically from Netgate, allowing for more
flexibility and direct support to update for the Plus repositories.

Don't modify routes when adding or removing DNS IP addresses that exist on interfaces. Fix #14288

Fix references to 'disable_carp' introduced in 62fb07c816. #2218

The original commit had some lingering references to a function 'disable_carp'
that had been abandoned in favor of a single 'enable_carp' function with enable
arg. This commit corrects these lingering references.

Fix PHP error from invalid IPsec P1 config. Fixes #14458

Switch to PHP 8.x friendly functions to access multi-level array parts
since there is a chance they may be empty or partially defined in the
encryption algorithm section.

resolves issue #13940 by adding a default statement to handle any protocol layout

Correct the filter when validating URLs. Fix #14356

OpenVPN CSO: Improve form field JS. Fixes #13088

Originally-From: PhilZ-cwm6 @ GitHub

Convert AJAX GET calls to POST

CP fix check for used mac db content. Fixes #14446

Correct Outbound NAT 'other' type selector. Fixes #14354

Fix mac_procs incorrect references. Fixes #14425

Ignore ngeth and wg interfaces when performing interface mismatch detection. For #14410

Correct 6o4 addr variable name. Fixes #14415

Correct alias bulk import regression. Fixes #14412

While here, ensure that a broken alias configuration does not cause PHP
errors which prevent users from using the GUI or console.

inc/upgrade_config: PHP 8.x issues. Fixes #14400

Fix ipsec_ikeid_next() copy/paste errors

The content of ipsec_ikeid_next() had some references to undefined variables
stemming from a change of nomenclature between 'ike', 'req', and 'key'. This
seems to stem from content in ipsec_ikeid_next() originating as a copy/paste...

Add VLAN support validation for the Packet Capture interface. Fix #14376

Replace abbreviated links from System menu

Disable CARP until services have started and before shutdown/reboot. Fixes #2218

CARP has historically been enabled as part of interface bringup and sync setup
fairly early in rc.bootup. This change intentionally shuts down CARP from
interface bringup all the way until services have been started to ensure that a...

Relocate ConfigLibTest.php to new tests directory

To correctly handle running test in situ, add set_include_path() call to add
relative src/etc/inc path to the include path string

Work around PHP var ref scope weirdness. Fixes #14363

Ensure RSS widget number values are treated as int. Fixes #14365

Revert "Correct RAM disk swap calculation. Issue #13508"

This reverts commit b10998b1951b3e0d1cb74449a6b6dd333b9d292a.

Correct RAM disk swap calculation. Issue #13508

It was not factored into the shell version as it should be (still a
problem here, see Redmine).

It was also returning a bogus small value on systems that have no swap
configured.

Fix PHP 8.x issues in separator functions. Fixes #14338

Remove unnecessary utf8_encode'ing to pfSense_kill_states arguments. Partial #9270

Use first label, not last. Fixes #14336

Have rtsold always call the script, even if 'M' or 'O' bits are not set

Repsect NAT nosync for assoc rules. Fixes #14335

Update method of finding rule labels. Fixes #14336

The way rule labels are returned from pfSense_get_pf_rules() changed, so
this code needs to follow the new format.

Correct array_path_enabled syntax for nosync check. Fixes #14316

FW rule GW status popup improvements. Fixes #14327

• Fix status check to account for current gw status/substatus strings
• Include Tier for gateway groups
• Sort groups by tier and then name
• Fix interface name printout
• Optimize interface name and gw address display to avoid multiple...

Use new utility function for ethertype, use correct operator, and remove redundant code. Fix #13382

Expose new utility function to validate ethertype. redmine #14308

refactor is_module_loaded to first check by module name, then by file name

Corrections for shaper wizards. Fixes #13915

• Fix many inconsistencies in formatting between the wizards
• Fix a few potential bugs in both (changes made to one to fix issues
  were not reflected in the other).
• Various style and whitespace corrections.

refactor format_number and eliminate trailing space on unitless numbers

Load if_gif if needed when creating a gif interface. Fixes #14035

PHP 8 fixes in Dedicated Links Shaper Wizard. Fixes #13915

While here, clean up some formatting.

PHP 8 fixes in Multi-All Shaper Wizard. Issue #13915

While here, clean up some formatting.

Fix invalid pcap filters in some cases. Fixes #13382

rc.carpmaster: remove openlog() call which changes php-fpm log facility

In commit 0eae38cd2511e304c4660f8aeead751564f9dfc9, this call was added
alongside other changes to the rc.carpmaster script intended to reconfigure
captiveportals upon promotion to master. When php-fpm executes rc.carpmaster,...

Remove invalid syslog test. Fixes #14283

Having an empty syslog config section is valid, as is not having a
section at all. We should always generate the configuration since we
always start the syslog daemon.

If we want to eventually allow not configuring or running the daemon at...

Additional changes to new Packet Capture GUI. Implements #13382

Fix DHCP HTTPBoot w/static maps. Fixes #13573

Fix handling of OpenVPN client TN. Fixes #13350

• ifconfig format was incorrect for certain mode combinations, leading
  to OpenVPN failing to start.
• Changed wording on GUI TN field descr so it's more clear that the TN
  shouldn't be set in most cases, also mention that the user should be...

Add plugin hook for nginx conf. Implements #13054

• Plugin hook is called once for entries to be placed below locations in
  the main GUI server, and a second time for entries placed after all
  server stanzas.
• See Redmine issue for usage examples

remove dhcpleases6 from base install

Fix default DHCP server if selection. Fixes #14115

Safety belt check for CP used mac db content. Fixes #14172

Don't sync if settings are empty. Fixes #14182