pfSense

No need for the 'filtering bridge' option with if_bridge(4).

Rewrite the pfsense privilege system with the following goals in mind ...

1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance...

Fix IPV6 error: Fatal error: Cannot unset string offsets in /usr/local/www/system_advanced.php on line 170

• Show WAN instead of LAN when LAN does not exist for anti-lockout
• Do not show the LAN interface when it is not present in SSH config options

Do not show LAN related items when the interfafe does not exist.

touch up text

Ticket #1627

cosmetic fixes
output product name correctly

Add product_copyright re-branding support
Add product_copyright_years re-branding support
Add product_website re-branding support
Add product_email re-branding support

Work sponsored-by: Centipede Networks

Correctly show defined reflection timeout value

Add frontend for reflection timeout value

Switch over to array style page titles. Obtained-from: m0n0wall

MFC of change [19782] per request from sullrich@

Scale state table size with memory, never allocate more than 10% system ram, this leads to 12K states on 128M and 102K on 1G systems - this should be a good default

global s/[wW]ebGUI/webConfigurator/ - brought up via ticket #1427

Fixing css layout

Only reload webGUI con CERT or KEY changes.

s/Passwordlogin/Password login/

Revise polling text.

SSH-Key(only) Login

Port load balancer sticky address option

Comment out the m0n0wall option until the kernel panics are tamed

MFC m0n0wall traffic shaper option

Add an option to disable firewall scrubbing altogether.

Process post code above form so that the checkboxes get checked correctly.

Remove spaces before save making the page uniform again.

Use isset()

• Do not run save logic twice (slows the page down)
• Add disable hardware checksum option which prevents the system from turning on hardware checksum offloading. This seems to be a growing problem on a lot of nics such as SK

Disable firmware check, we are not using it in RELENG_1

MFC
Import Static route filtering option from m0n0wall 1.2b5 It appears this knob was missing since after BETA3 and thus may have caused issues with static routes on any interface.

• Remove un-needed commands
• Cleanup

Remove hard drive standby code. Will need much more work to make it 1.0 and we are outta time.

Will return to life possibly in 1.1.

Do not show a blank page after enabling SSH

Flush output correctly when restarting webConfigurator.

Remove duplicate save button

Move theme selector to general screen
Ticket #895

Add ability to turn off packet scrubbing.

Ticket #882

Submitted-by: sdier@cs.umn.edu

Flush before before setting web server reload flag

Trigger reload at end of page

Clarify reflection role

Nuke all occurances of scheduler

auto_login() has been moved to pfsense-utils.cin

MFC 9548
Shift serial port toggle routine to pfsense-utils.inc. Call this function after configuration import to setup needed bits on system for serial console if need be. Shift console locjout routine to pfsense-utils.inc. Call this function from serial port code to setup if auto login / console lockout is enabled after config restore

Correctly restart web server after certificate change

Add back missing save button

Fix bugs found by eclipse

Use red dashes

Use padding 5px; for help/info boxes

Remove #!/usr/local/bin/php

Add spacer

Add filtering bridge header

Add filtering bridge toggle switch just like m0n0wall has.

Ticket #756

Do not modify scheduler type. Wizard is currently the master of the domain.

Do not modify boot.config on CDROM platform (RO)

Fix the no job control errors.

Thanks to satu for doing the research on keyboard muxing.

Update reflection blurb to "Disables the automatic creation of NAT redirect rules for access to your public IP addresses from within your internal networks"

Suggested-by: cmb

Remove FTP reference

MFC 7522
Add NAT Reflection AKA Nat Bouncing nat Flashback and many other groovy names.

Sponsored-by: Greenhagen, Robin <Robin_AT_gsi-kc.com>

Please visit http://www.gsihosting.com/ for all your hosting needs as they are sponsoring pfSense and plan to use it extensively!...

Do not require a reboot to setup polling.

MFC 7401
Add support for per interface ftp helper.

Suggested-by: Dan Swartzendruber <dswartz_AT_druber.com>

In-Discussion-with: Bill M, Dan S

<br> between "Note:"

MFC 7313

Setup serial console correctly

Ticket #670

MFC 7246
Alternate schedulers are disabled, don't let advanced settings accidently clear this.

Reported-By: Peter Zaitsev

Only show hard disk standy time on hard disk platforms

Ticket #643

Kill sshd if user has deactivated it.

MFC 7033
Enable and disable serial console support if requested. Recent changes for USB keyboard and vty's changed this behavior some.

Restore / save checkbox correctly

Touch /tmp/ not /tmp/tmp

m0n0wall -> pfSense

Add polling enable/disable control in System Advanced

Suggested-by: CMB

Hand off starting SSHD to our background daemon

Accidental debug line removed

Allow running of ssh on alternate port

Do not alter /etc/gettytab

Remove ability to change schedulertype - we're only supporting HFSC for
now - priq may come back in future, the return of CBQ is unlikely

Remove notorius loader.rc code. This was the source of the million line lodaer.rc. Beauty.

Note that NAT will be turned off with the firewall disabled.

system -> shaper

Do not write out line unless it has contents

Remove extra :

Spell gettytab correctly.

Escape " system_advanced.php

Escape \ with \

Do not disable console in rc.initial. We are changing the behavior to turn off autologin.

In-discussion-with: cmb
Provoked-by: Yet another complaint about old behavior

'supress' -> 'suppress'

XHTML/CSS Clean Up

Add patches from databeestje which:
This will supress ARP messages when interfaces share the same physical network

Enforce maximum and minimum state values

Ticket #356

If you are a developer show under development themes.

Allows for theme directories with "_" as a prefix not show up in the GUI. :)

Alert to user that we cannot open a file for writing instead of letting php spew bad looking errors.

Use enablesshd tag

Correctly save hard disk standby time

Ticket #278

Correctly save hard disk standby time

Ticket #278

Start SSHD if applicable

Break after hint box

sshenable -> sshenabled

sshenable -> sshenabled

Write out posted sshenabled value

Clean up message

Allow SSH service to be disabled / enabled.

• Drop kick reboots bye bye