pfSense

Merge lan configuration to the interfaces_wan.php page wich does the configuration of all
other assigned interfaces.

Remove empty trailing line at end of file.

Bring in relay options for inbound load balancer
More work pending, this seems to generate proper configs
needs much more testing though

Stop clobbering $if on local pages.

Rework most of the OpenVPN support. The interfaces have been updated to
not use the pkg system and the configuration has been migrated to an
openvpn prefix. The centralized user and certificate manager is now used
to support the openvpn configurations. Most of the files removed in this...

Move format_bytes() to util.inc to match m0n0wall

`cat /var/folders/X7/X7bVv+-6HAyNkkcSCwAA5k+++TI/-Tmp-//cvsCjq0EX`

add MSN to well-known-ports

• The ability to create your own monitors (tcp, http, https, send/expect)
• A new way of displaying 'standard tables' - MainTable class
• monitor_type array type

Add an interface to manage external authentication servers. The two types
supported currently are LDAP and Radius.

Rewrite the pfsense privilege system with the following goals in mind ...

1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance...

Add inline print style css output code and switch nifty to it.

Add carriage returns

Move Inline CSS and JS functions to guiconfig.inc.

Introduce a new and improved version of IPsec mobile client support. The
mobile client tab is now used to configure user authentication (Xauth) and
client configuration (mode-cfg) options. User authentication is currently
limited to system password file entries. This will be extended to support...

Overhaul IPsec related code. Shared functions have been consolidated into
a new file named /etc/ipsec.inc. Tunnel definitions have been split into
phase1 and phase2. This allows any number of phase2 definitions to be
created for a single phase1 definition. Several facets of configuration...

Remove unused code.

Continue interface improvements

Begin adding OpenVPN users feature.

fix up reverse logic in return_clog() so it doesn't default to reverse
make the slbd status pages override the reverse logic in return_clog()
so these pages aren't now broken. This change actually fixes the ipsec
diag logs page being reverse (and not honoring the log reverse/forward...

Allow clogging capabilities to be turned off.

Return false if $net is not defined.

touch up text

Ticket #1569

moved widget tab function to guiconfig.inc

Do not show hostname in page title.

Unbreak title in package areas.

Move common functions to guiconfig.inc since head.inc requires them.

remove whitespace at end

comment out debugging code, was slightly breaking IPsec logs page and possibly others.

Ticket #1462: Make the save button only appear if you change an assignment

add MMS (TCP/UDP) to protocol definitions

added STUN,RTP,SIP to protocol-definitions

Add ASN1DN identities support to IPSEC.

Subbmitted-by: Nic Bernstein <nic_AT_onlight.com>

Add system tunables area which allows the user to fine control sysctl's.

Remove syslog from port definitions

Ticket #1314

Add more protocols.

Submitted-by: Martin Fuchs

Add more well known ports to the protocols drop down.

Patch-submitted-by: Martin Fuchs

Backport usermanager code from HEAD so I can get it in the snaps and
start testing it properly
There's still some CSS/HTML fixes needed but the code seems to work

Firewall Schedule GUI! ... and there was much rejoicing.

We do not need to enforce reboots.

Added Alias popup description for firewall rules.

• Fix status -> slbd
• Simplify dump_clog() and return_clog() to where a preschooler can read
• Fix main diagnostics logs after the above fallout

Restore nuked $i variables

We cannot tail the initial clog file in return_clog because we are not guaranteed to have that amount of "matching" lines. Instead, build up a grepline that contains all of the grep and grep -v statement. This now allows the tail to chop off the last X lines correctly.

We cannot tail the initial clog file in dump_clog because we are not guaranteed to have that amount of "matching" lines. Instead, build up a grepline that contains all of the grep and grep -v statement. This now allows the tail to chop off the last X lines correctly.

Don't try to filter records that have strange date / time stamps.

• Allow setting of OPTional interface IP address correctly
• Print "Interface IP Address" in firewall rules summary when selected

Ticket #1052

Remove date check. This is breaking the system logs in certain cases and I am tired of fighting this battle. The logs WILL remain broken on the last entries in some cases. I know of this fact and I do't plan on changing it as it breaks something else ever time that a fix is attempted.

Do not show entries with corrupted time entries (clog)

Remove repeat return_clog()

MFC 12656
Required changes for status_slbd_pool.php

MFC Load Balancing status screen

MFC rijndael,rijndael 256 support

Requested-by: Andrew Thompson

Do not show log entries with busted dates due to CLOG support.

MFC 11472
no longer use dirty pool - restart all of slbd if VS or Pool changes

MFC 11098
Helper -> Allow for LAN Address in rules MFC: with billm changes for next snapshot.

Define $d_shaperconfdirty_path

Tell user they can monitor the filter reload status when applying the rules.

Woops, dont grep for CLOG, inverse grep.

Pointy-hat-with-wings-to: ME

Do not show entries with CLOG in them.

Do not include characters with ESC (dec 033) in them. Examples of this are ansi escape codes.

Move gui globals to guiconfig.inc

Correct warnings and errors found eclipse

MFC

MFC 8799
EZShaper wizard will now spit out rules ordered by queue priority in order to at least make a stab at a reasonable rule order

Use / as relative begining path

Add embedded platform

Add wanip as a special net

Allow a 0 to be posted (false).

Ticket #645

<br> after error messages. our gui is so pretty that this really looks bad.

Add port descriptions for:

NTP
IDENT
IMAP/S

I'm an idiot - clean up CVS merge message.

Restore old logging code.

Only foreach through arrays

• Handle inverse grep correctly
• Only show system logs on System tab (no racoon)

Add lan dirty flag

Change to applied successfully.

Show differences in arrays in $changedesc

vsconf

Need dirtypool

Add $d_pppoeuserdirty_path to globals

Add pppoe_users_sort()

move IP TOS and TCP FLAGS to globals.inc now that filter_reconfigure
might be run outside of the gui

Move theme selection to guiconfig.inc.

just a few modifications

updating files to use theme images
removing images from /usr/local/www
adding specific images into the correct theme directories

Add Dynamic DNS to allowed identifiers

Merge in virtual IP code
This changeset does the following:
merges proxy arp and carp setup menus
removes proxy arp menu from left side
upgrades config file from 1.7 to 1.8
moves existing carp virtual IP and proxy arp config to new <virtualip> tag...

Code cleanup

<br> after informational messages

Remoive <br>

Only show apply changes button if apply is in the message.

Consolidate Apply changes button into the info box on the right hand side

Break msg into its own table to protect from wrapping under icon

Move image to the right some more.

Cleanup alert message.

• Set $d_hostsdirty_path in guiconfig.inc
• Turn back on checking of $d_hostsdirty_path

Merge IPsec defines from m0n0wall

add ipsec_ca_sort()

Restore guiconfig.inc and remove comonly used functions.

Somehow I forgot we already cleaned up this mess.