pfSense

Allow tags placed on Floating Rules to be used for matching on interface tabs.

Correct the name

Introduce OpenVPN tab

Allow the FloatingRules extra options to be displayed when creating rules from scratch

Fix missing 'class' typo

• Make the GUI aware that we can now handle DSCP in firewall rules
• Remove duplicate entry for clamav package in filter_rules_generate()

• Unbreak rrd graphs for queues and make them multiinterface aware
• Add a new tab for queuedrops with multiinterface there is no way to have them in the same tab
• Remove $GLOBAL where used and use proper accessor functions
• Remove Manuel from copyright this file has been rewritten...

Do not show duplicate queues names on rules edit page

Move tag/mark options to the Advanced section.

Don't show LAN in Interfaces drop down if it doesn't actually exist.

Bye bye, LAN interface requirement.

Fix for "Invalid argument supplied for foreach()" on 937

Fix an error with previous commit.

Unbreak tags on the floating tab.

Fix some typos.

Finish the Floating rules toolbar.
Now you can create rules with tags/direction/match by tag/choose direction/choose multiple interface/quick.

Just for note the queue assignment has been moved to the Firewall->Rules section. Now for every rule you create you can choose the queue for it.

Bring in the new traffic shaper.
It is capable of multi interface shaping.

Also bring the wizard up-to-date. Now it is capable of doing multi interface too.

touch up text

Ticket #1569

Add product_copyright re-branding support
Add product_copyright_years re-branding support
Add product_website re-branding support
Add product_email re-branding support

Work sponsored-by: Centipede Networks

Tell user which characters are bad

Use htmlentities() to detect html injections.

Do a check on all ID's > -1. When we a dup a rule with id 0 the checks where bypassed.

Spotted-by: billm

• Run through all posted values and encode them to a temporary variable. IF the contents differ then the operator is doing something bad. Simply reject the item with invalid character error and let them fix their XSS exploit attempt, etc.

Only show interfaces user has accss to.

Only show interfaces that the user has access to edit on the firewall rules edit page.

Allow each interface to have ACL's so you can assign a user to be able to edit just that interfaces rules.

description text correction

fix typo and touch up text

Switch over to array style page titles. Obtained-from: m0n0wall

List the available Gateways on the rules edit screen

Fixing css layout

Remove IPV6 operations.

Remove <br/> from schedule strong note.

Add a note about firewall rule schedule logic that will pop up in a new window describing how pass rules work when they are outside of the schedule window, etc.

Do not output blank gateways

Only foreach() through the object if it is an array.

This should fix the Warning: Invalid argument supplied for foreach() in /usr/local/www/firewall_rules_edit.php on line 729

Firewall Schedule GUI! ... and there was much rejoicing.

Backport IPSEC filtering to 1.0.1.

Requested and will be tested by Seth

sICMPV6/ipv6-icmp/

Notify user that reject style rules only work with the TCP protocol.

Ticket #1118

Do not allow user to select "network" and enter an alias. Alert user the item is an alias and that is should be set to "Single host or alias" option before saving.

Ticket #1090

• Allow setting of OPTional interface IP address correctly
• Print "Interface IP Address" in firewall rules summary when selected

Ticket #1052

MFC 13319
Add NMAP to OS list Useful for blocking NMAP scans :)

Add entries for optional interfaces ip address

Ticket #1041

Add entries for optional interfaces ip address

Ticket #1041

While I am nitpciking this form to all get out, move the description to the bottom where it should be.

s/gettext//

Keep state really wants to be an advanced option, too. Let him join the party.

Make other button consistent now with a -

- Show advanced options

Turn advanced option are into a default to no show area as well.

Move state timeout to advanced options row, its the same as the other options as you leave it blank for default.

Only foreach if lb pool is an array

MFC
Hide source and destination port boxes when protocol is not tcp, udp or tcp/udp

Convert to button so page does not shift after url being pressed

Hide Show advanced option button when user clicks on the option

MFC
Require the user to have a brain to see the Source port range for a firewall rule by adding a link in the source box that says Advanced - Show source port range.

MFC
Require the user to have a brain to see the Source port range for a firewall rule by adding a link in the source box that says Advanced - Show source port range.

Add missing <ul> and </ul> elements.

MFC 11098
Helper -> Allow for LAN Address in rules MFC: with billm changes for next snapshot.

MFC 11097
Allow for LAN Address in rules MFC: for next snapshot

Remove #!/usr/local/bin/php

Fix members

Add blurb HINT: This prevents the rule from automatically syncing to other carp memebers.

Nuke display_topbar(). Its's currently red and looks incredibly out of place. Hopefully we can add this back post 1.0

MFC 8288
Add NOSYNC options to firewall rules and firewall nat outbound

MFC 7320
Add interface ip option for firewall rules

unless both max-src-conn-rate and max-src-conn-rates are provided, unset the values - ticket #650

No need to strong a table

Use a table width of 90%

<br> before second note

NOTE to user that they will not enter anything here 99.99999% of the time and if they are unsure, don't enter a value here.

frags -> statetimeout

Ticket #547

(#479) GUI side workaround for multi-wan synproxy issue

Correctly restore DHCP gateway setting in firewall rule.

Ticket #480

Slightly better description of what the gateway option actually does

First Step in Fixing AutoComplete and Cleaning Up Code

Add DHCP gateways

Ticket #371

$config -> $pconfig

Use lbpool, not virtual servers

Allow selection of pools for outgoing load balanacing

add pfSense (C)

Add PPPoE options

really restrict user labels to 63 chars

server side checking that description doesn't exceed 63 characters (since
we use it for the rule label"

Don't allow user to enter descriptions longer than 63 chars

More screens inherit rounded tabletops

Don't close <head> tag - these files use javascript inside <head>

Correctly include head.inc

Use $pgtitle instead of re-typing the page title over
Use head.inc on the _edit.php files

Do not redeclare functions

Add address_to_pconfig()

Backout last commit

Add TCP Flags menu to firewall rules edit screen

Close a comment correctly

Missing "e" in "else"

No need to check for default route, this option should only override the routing table
not make you choose per rule.

Really create a "default" gateway that doesn't override the routing table

Grab default route as a gateway, interface might be dynamic

Fix ) bug

Remove extra input box