pfSense

Use radio buttons to select between IPv4, IPv6 or Both.

Add option to not register IPv4 and/or IPv6 addresses.

Add option for wireless standard "auto", to omit "mode" entirely from ifconfig. This shouldn't be necessary, but specifying mode has proven to trigger driver problems that don't exist if it's left unspecified (such as FreeBSD PR 198680). Chosing "auto" fixes ath(4) BSS mode issues otherwise preventing it from connecting.

change the location of jquery-ui images in each theme's css file

Merge pull request #1571 from phil-davis/patch-2

Cleanup code path when adding a new user

1) Only attempt to delete the oldusername if it actually was non-empty - at the moment errors are logged in the system log when adding a new user, because the code was trying to delete the user name "".
2) Call local_user_set() first to create (change, whatever) the user record. This makes the user record exist for a new user. Then call local_user_set_groups() to sort out what groups the user should be in or not in. The existing code would fail to add a new user to the specified group/s because local_user_set_groups() was called too early, before the user actually existed....

Do not allow VLAN tag zero

At the moment you can make a VLAN with tag 0. The input validation does not catch it because when $_POST['tag'] = "0" that evaluates to false by PHP.
Always make the checks on 'tag' value whenever the 'tag' key is set at all. If the (required) 'tag' key is not set, then that is already checked for by do_input_validation().

txpower was disabled for good reason it would appear, it triggers syntax errors in some configurations. Disable it again since it's been disabled for years, and comment out the user-facing config portion for now since it doesn't do anything. Ticket #4516

Apply WME input validation to all modes, not just hostap. Ticket #4516

Default to 11ng if an option hasn't been configured. Previously we let the browser pick the first in the list (the first the card reported as available), which ended up being 802.11b. Ticket #4516

Default to WPA2, AES for new wireless interface configs. Ticket #4516

Auto-size the interface box on the bridge edit page.

touch up interfaces.php text

Require WPA PSK where WPA-PSK is enabled. Clean up some other text. Ticket #4516

clean up input errors text

Fix up text, remove "only for Atheros" since the option is only shown if a compatible card exists.

"Auto" channel with hostap doesn't work correctly at the moment, force choosing a specific channel with hostap mode for now.

add more wireless validation. Ticket #4516

Add more validation for wireless config settings. Ticket #4516

Add more input validation for wireless parameters. Ticket #4516

Touch up wifi text

clean up unique IDs text a bit.

Proper fix #4443, do not unset carp entry when content differ, also set correct real interface and use subnet to check IP protocol

Save vip interface and subnet to use to delete old vips from secondary nodes. Fixes #4446

Revert "Use a consistent variable name here. related to Ticket #4446"

This reverts commit 309162b96d6ad0db09c132cc0aabc890bfe1909f.

add granular control of state timeouts. Ticket #4509

Conflicts:
etc/inc/filter.inc

Remove BEAST protection option since default cipher is now good and works with hifn cards

Merge pull request #1549 from phil-davis/patch-2

Merge pull request #1550 from phil-davis/password-lock-symbol

Merge pull request #1548 from phil-davis/pencils

update description after adaptive start/end default change.

Use a consistent variable name here. related to Ticket #4446

Conflicts:
usr/local/www/xmlrpc.php

Don't enable interfaces_use by default. Add checkbox to enable on Advanced
tab, in case there are scenarios where it's desirable. Ticket #4341

Fixes #4427 Correct traffic shaper wizard to properly save and use Voip provided settings

Fixes #4427 Correct traffic shaper wizard to properly save and use Voip provided settings

Fix password box cursor position

Similar to
https://github.com/pfsense/pfsense/commit/dedc40f7ded5f88aee4720aa8a3a57667b975254
The password field shows the little lock icon, but the text input area
starts over the top of the icon and as I type in the field the password...

Fix SNMP Bind Interface list in master

The format of the array returned by get_possible_listen_ips() was changed.
This use of the returned array was not quite changed correctly. This fixes it so the drop-down list of SNMP Bind Interfaces is displayed correctly....

Revert "Fixes #4446 Correct ipalias removal on top of carp during configuration sync."

master works differently and get_real_interface() resolves vips as well.

This reverts commit 8896fe1cebdc97dcbeb59249f3bb2abd1601b979.

Fixes #4446 Correct ipalias removal on top of carp during configuration sync.

Pencil symbols

These are places in the GUI where the cursor sits not in the far left
side of the input box and there is odd-looking white space to the left
of the cursor. Normally there would be a little input graphic in the
white space to the left of the cursor (a pencil, a computer screen, a...

Allow reassignment from PPP types to DHCP. From testing, it appears to work OK, this input validation appears to be outdated.
If there is some edge case that this catches, perhaps it needs to be a more specific test.

Add missing 'break' statement that broke switching from a PPP type to 'none'.

Merge pull request #1544 from phil-davis/patch-4

Merge pull request #1542 from phil-davis/patch-2

Add missing opening bracket

Remove extra closing brackets

$ldescr variable is not assigned a value and all 'Outgoing Network Interfaces' show Localhost as a name on UI

Missing $

Check for console="comconsole* rather than just comconsole in loader.conf, so it doesn't match just having comconsole_speed in loader.conf. Ticket #4464

Expand CARP demotion error, add button to reset demotion status.

Remove multiple spaces from dns_split as a seatbelt, also fix the message since field is expected to be space separated and not comma. Ticket #4418

DNS Forwarder Host Override Edit make the pencil symbols appear

In most places in the GUI a little pencil symbol appears before text input fields. For example it already appears for the Host, Domain and Description fields in this very form when you "Enter additional names for this host."...

touch up text

fix up text

Don't save config if input validation fails. Add input validation preventing "Harden DNSSEC Data" from being enabled if DNSSEC support isn't enabled.

Remove the harden-glue option entirely and hard code it to yes. Ticket #4402

Encode and check values for filtering variables in diag_logs_filter.php

Do not render the services_unbound_acls page with an invalid ID.

Stricter validation and encoding for traffic shaper queues.

Jettison unused dragtable code from firewall_rules.php, it was broken and inactive and only causing trouble.

Improve validation and encoding of the zone for Captive Portal Status

Be more strict about the file to restore or delete when working with full backups.

allow enabling Unbound when dnsmasq is enabled, if they're using diff
ports. Ticket #4332

Fix password box in diag_authentication

In 2.2 when I go to Diagnostics->Authentication the password field shows the little lock icon, but the text input area starts over the top of the icon and as I type in the field the password "dots" go over the lock icon....

Merge pull request #1539 from phil-davis/patch-7

Merge pull request #1538 from phil-davis/patch-6

Merge pull request #1537 from phil-davis/patch-5

Merge pull request #1536 from phil-davis/patch-4

Merge pull request #1535 from phil-davis/patch-3

Make the DHCP network booting options line up

by putting the text and selection boxes into a 2-column table so that it can be rendered with the boxes lined up vertically.

Make the Power Mode selection boxes line up

by putting the text and selection boxes into a 2-column table so that it can be rendered with the boxes lined up vertically.

system_groupmanager edit cancel button looks small

It looks smaller and different to the Save button. This makes it the same.

system_usermanager edit cancel button looks small

It looks smaller and different to the Save button. This makes it the same.

Standardise power mode selection boxes

I noticed that this looked a little odd, the boxes for AC and Battery Power Mode are 1 after the other on the same line, then the 3rd box for unknown power mode is on a new line.
Maybe make them all on their own line, like this?

Remove "Prefer old SA" option, and ignore it in all existing configurations. Breaks things in many cases with strongSwan. For the very rare circumstances where this is actually desirable, it's just a sysctl that can be set in tunables.

Add missing BR tags and fix display with pfsense_ng_fs theme

Fixes #4481
Similar issue to commit https://github.com/pfsense/pfsense/commit/5cfd948144741ba0d6981f89b2e40257cb9ef2b1
Note: services_dhcpv6_edit.php - these fields are not present so nothing to edit/fix.

Fix track6 prefix id range in error message, reported on Pull Request #1517

Check if variables are set before trying to pass them to function substr_count to avoid generating PHP alerts.

Ticket #4418 make sure the dns_split is separated with spaces rather than space or comma to comply with strongswan requirements.

When RADIUS auth is selected, radius protocol and server ip/host are mandatory. Fixes #4384

isset is a better check here

Merge pull request #1494 from k-paulius/ntp-rrd-fix

Merge pull request #1479 from surrural/master

Merge pull request #1492 from PiBa-NL/carp-statusicon

Ticket #4445 do not write config and remove its cache when applying settings its just behaviour from dinosaur era and should have been cleanded long time ago.

Add support for DNSimple (dnsimple.com)

Merge pull request #1497 from phil-davis/patch-2

Merge pull request #1478 from razzfazz/fix_dhcpv6_avail_range_dump_master

Fix display style typo

I could not see any difference in rendering of the page after fixing this, but it looks it it should be fixed.

Fix display style typo

I could not see any difference in rendering of the page after fixing this, but it looks it it should be fixed.

OpenVPN server improve handling of authmode

Currently if the user is clicking around while they are setting up an OpenVPN server, they can do stuff like this:
a) Select Server Mode - Remote Access (SSL/TLS + User Auth)
b) Select something in Backend for authentication...

vpn_openvpn_server.php white space

Merge pull request #1505 from phil-davis/patch-7

Merge pull request #1504 from phil-davis/patch-6

Merge pull request #1506 from k-paulius/fix-links

Success typo

might as well fix it while I notice it

Fix broken links to dhcp6c.conf man page.

manpath FreeBSD+Ports no longer exits and needs to be replaced with FreeBSD+10.1-RELEASE+and+Ports

Mention interface name on DHCP edit GUI

IMHO it can be confusing on the DHCP edit page for static mapped entries to know which interface the entry is being edited/added for. Specially if the user comes from the Status DHCP Leases page, the lease they are editing/adding could be for 1 of many LAN-style interfaces....

Status_dhcp_leases fix edit button for static entries with no IP address

The edit button for static entries always has an index id=0 and thus pressing the edit button goes to (mostly) edit the wrong entry.
It was easier and made the code cleaner to get rid of the looping through the staticmap array every time trying to matach IP, MAC address... That data ('if' and 'staticmap_array_index') is easily gathered further up, the first time the staticmap array for each DHCP interface is traversed. I think this should also be more efficient when there are many static mapping entries....

diag_arp allow underscore in resolved host names

is_hostname() and is_domain() allow underscore in the names. So it is possible to have underscore in host names, for example in DHCP server static mapped entries I have some things like:
10.42.3.4 client-pc-01_LAN...