pfSense

Add a checkbox that disabled automatically generates negate rules for directly connected networks and VPNs
Ticket #2057 in redmine

Fix typo

Clarify notes so people don't think they need to disable pf to disable NAT.

remove dead link, no equivalent exists, will add info on that page's help

Test if a variable is set before trying to unset it. If a user has no rules in their config, then $config['filter'] would not be undefined, so unsettings $config['filter']['bypassstaticroutes'] would result in an error. http://forum.pfsense.org/index.php/topic,35702.0.html

Correct text to include PPTP as well.

Resolves #1391. Bring back VPN auto rule disable advanced setting.

This is not NAT, so put it under the Firewall Advanced heading instead.

Add Global reply-to disable checkbox, resolves the issue #1137

reversal of accidentally deleted files
Revert "Add Global reply-to disable checkbox, resolves the issue #1137"

This reverts commit c646776871dacebcaa4225b083aa0789dc0bfba6.

Add Global reply-to disable checkbox, resolves the issue #1137

Add option to control automatic creation of NAT rules which assist forwarding rules that send traffic out to the same subnet it originated from.

gettext fixes

On system_advanced_firewall.php, fix display of selected TFTP interfaces after saving. Fixes #794

Make Firewall Optimization Options text readable

Add a GUI field to let the user configure the maxium table entries size. Resolves #588
NOTE: Actual tables, not states.

Add note that reflection timeout only applies for port forwards.

Revert changes to reflection for port forwards until finished and approved.

Merge remote branch 'mainline/master' into patches

Resolved conflicts:
usr/local/www/system_advanced_firewall.php

Slightly change wording of NAT reflection description.

Add configuration option in System: Advanced: Firewall/NAT for NAT reflection on 1:1 NAT.

Remove note about reflection being skipped on large port ranges.

Removed unused NAT reflection timeout setting.

Fix gettext issues

Merge branch 'master' into gettext

Resolved conflicts:
usr/local/www/system_advanced_firewall.php
usr/local/www/system_routes.php
usr/local/www/system_routes_edit.php

properly show TFTP enabled interfaces

Fix : for translations

Add missing gettext() call

Merge branch 'master' into gettext

Implement gettext()

Mark this just informative textarea as readonly

Ticket #508. Make TFTP proxy configurable by System Advanced->Firewall/NAT for several interfaces.

Do not use the presence of lan as an indicator of having only one interface. Actually deduce that from the count of interfaces. It is perfectly legal on 2.0 to not have a lan interface and only opt/wan ones.

fix text

fix text

Require filter.inc and shaper.inc

Add pfSense_BUILDER_BINARIES: and pfSense_MODULE:. Adjust Copyright to include 2009 on files that I have asserted (C) on

Adding Notifications tab

• Create two new functions lock($subsystem)/unlock() to have more reliable locking using semaphores.
  This function can sleep till the resource is free and can help find not well behaving code.
• Remove most of the config_lock/config_unlock logics on the whole scripts/pages it is an abuse of this....

From yesterday moving of ipfw loading to only captive portal a regression was noticed on ipfw states sizeing.
Fix this regression by changing this states when they are changed on the system advanced settings page.

Reported by: cmb@

Remove "Allow IPv6" option from Firewall/NAT tab, it's already on the Networking tab with other IPv6 options.

Block all IPv6 traffic by default, since IPv6 isn't supported, there isn't any way to add such rules in the GUI, and nearly all users won't want IPv6 to traverse their firewall at this point. Add "Allow IPv6" checkbox to disable this behavior.

Remove ftp-proxy/pftpx/ftpsesame references we handle all of this in kernel now.(yay!)

Fix typo

Correct config path so filter rules are generated again for static
routes.

Remove ocurrences of m0n0 for shaper type in the code.

Split random-id and no-df option for scrubbing.

Break before information text to match other pages

Move the 'advanced users only' notice into the tab body so the tab headers
are not displaced by this message.

Cleanup the tab format of the system advanced pages. The edges were square
instead of rounded like most pfSense pages.

Break out the advanced system options page into tabs group by categories.
Fold the sysctl tunables page into a tab under the advanced options page.
This reduces the top level menu options by one. There should be no
functional changes.