pfSense

Move interface groups after Floating and before other interfaces

• Convert schedules to pf(4).
  This allows to schedule the whole feature of the rules like queues/limiters/gateways/blocks/allows/etc...
• Whitespace cleaning on filter.inc
• Move schedule backend logic from pfsense-utils.inc to filter.inc and prefix with filter_....

Use * instead of Default for consistency

Do not show an * in schedule box. No schedule is applied for block private.

• Introduce interface groups. For now they are availble only on Firewall:Rules section maybe it would be usable to have tham on nat too.
• Some fixes and cleanup.

Massive javascript cleanup, all .js files now live in $g['www_path']/javascript
Purged unused JS

More L2TP fixes

correct description on block bogon rule

Do not hard code white color

Honour listbg font properties

Use listbg instead of hard coding red background for RFC1918 information

Catch up with file rename.

Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this...

Rewrite the pfsense privilege system with the following goals in mind ...

1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance...

Rewrite portions of the user manager to ensure data is properly synced to
the system password and group databases. This is to provide better support
for centralized user management when local account administration is
preferred.

I also took this opportunity to do some housekeeping. A lot of funtions...

• Merge multiple PPPoE/PPTP interfaces from RELENG_1_MULTI_ANYTHING
• Much improved rule generation speed
• Many bug fixing in general of the interface handling

NOTE: this is the other half of changes

Use different name for loop var.

Continue interface improvements

Move alias popup to function. Display Alias popup for NATs now.

Introduce OpenVPN tab

Fix typo.

With addition of queue column there are 9 columns to fill now so the message when there are no rules fills the whole area.

Do not show LAN interface when it is not present.

minor cosmetic nitpick - move "selected" icons one column to the right
after the queues column got introduced

Finish the Floating rules toolbar.
Now you can create rules with tags/direction/match by tag/choose direction/choose multiple interface/quick.

Just for note the queue assignment has been moved to the Firewall->Rules section. Now for every rule you create you can choose the queue for it.

• Fix many bugs itroduced with the new shaper code import.
• Introduce a new tab to the Firewall - Rules section called "floating rules" where you can create rules with direction/tag/tagged/quick keywords of PF.
• Improve input validation on the shaper code and the wizard....

Bring in the new traffic shaper.
It is capable of multi interface shaping.

Also bring the wizard up-to-date. Now it is capable of doing multi interface too.

touch up text

Ticket #1569

When showing the firewall rules page without a interface default to the first interface the user has access to.

Only show interfaces that the user has access to edit on the firewall rules edit page.

• Add PPTP, IPSEC and PPPOE
• Check for access to firewall interface tabs correctly

Allow each interface to have ACL's so you can assign a user to be able to edit just that interfaces rules.

Remove duplicate $pgtitle entry.

Switch over to array style page titles. Obtained-from: m0n0wall

show ipsec tab properly when mobile clients is enabled and no tunnel exists

Show the IPSEC firewall rule interface when mobile ipsec is enabled

Only show IPsec tab when IPsec is truly enabled and configured

Add a plus button on the top header of these pages.
This to make it easier on large configurations.

Schedule icon change, round 3

MFC: asap

schedule icon update

MFC: asap

schedule icon update

MFC: asap

Show icon that indicates whether the traffic is being blocked or allowed

MFC: asap

check if schedule config is array first

MFC: asap

initialize variable correctly
MFC: asap

Show icon when schedule is active
MFC: asap

Schedule popup on firewall page, stop min 0>00
MFC: asap

highlight schedule column on single clicks

Fixed column alignment for new schedule column

Shift icons to the right now that the schedule column is appearing

Include schedule column

Added Alias popup description for firewall rules.

Include IPSEC tab

Correctly detect when PPPoE server is enabled

Add PPPOE options.

Tell user they can monitor the filter reload status when applying the rules.

Let user know firewall rules changes are reloading in the background.

MFC 9536

Add reserved/not yet allocated by IANA aka bogons indicator

Correct icon url, format cell correctly

Woops, ours is called icon_plus_d.gif

Add in new greyed out +

Add RFC 1918 block indicator from m0n0wall 1.21

Remove #!/usr/local/bin/php

Pass interface along

Use interface description in gateway field if there is one

Increase colspan by 1.

Pointed-out-by: databestje

Increase colspan by 1.

Pointed-out-by: databestje

Add gateway to summary list

Make individual rule delete work as expected, delete individual rule, not
just selected rules

Add delete icon to each row

Ticket #392

(Ticket #393) Only do ipsec stuff if IPSec is enabled and <tunnel> is an array

Correct reject usage.

Submitted-by: pscott

Only foreach through valid arrays

Add IPSEC connections to firewall rules screen

add pfSense (C)

Add PPPoE to interface list

Unlink dirty marker

Reboots suck. Drop kick it to the moon.

updating files to use theme images
removing images from /usr/local/www
adding specific images into the correct theme directories

Fix bottom rounds

Consolidate Apply changes button into the info box on the right hand side

• Curve bottom of grey areas if needed
• Curve tabs
• Cleanup

Use $pgtitle instead of re-typing the page title over
Use head.inc on the _edit.php files

Add rounded tabbed corners

Add rounded tabs to add. Fix bottom rounded area.

Correctly check if a rule is disabled and toggle accordingly.

Fixes Ticket #96

Fix rules disable toggle

remove double <form> tag

Add doubleclick to edit rules

Add $Id$ tag

dynamic detection of cell count

Move row selecting javascript into it's own file so we can use it in other screens

• Add header with CSS at top (m0n0wall apparently moved this to fbeing.inc)
• Change the colors to pfSense
• Thanks to Colin for doing all the hard work :)

spelling

Automatically assign carp aliases with a ip on the same subnet to a interface.

Example:

lan = "{ fxp1 carp0 }"
wan = "{ fxp0 carp1 }"

If an error occurs during the rule loading, report the error to the user.

Convert filter_configure to return the error text from pf if a ruleset is not loaded correctly for any reason

Start the process of moving back to a m0n0wall style rules / queues system.

Update a few (C)

Update with 1.2b3

add back queues