pfSense

Add Auth Digest to OpenVPN wizard also.

Add an Authentication Digest Algorithm drop-down to OpenVPN server/client (SHA1 is the default since that is OpenVPN's default)

Revert "Define dynamic gateway for GRE interfaces and do not user to define IP address to the interface. Fixes #3280"

Another solution will be implemented

This reverts commit 6721d6d0443bd7e697bd6ca33f470c801608df7e.

Define dynamic gateway for GRE interfaces and do not user to define IP address to the interface. Fixes #3280

fix typo

Merge pull request #822 from CharlieMarshall/interfacesWidget

cleanup interfaces.widget.php

cleanup interfaces.widget.php

Use a more accurate error message, fixes #3282

Add source address selection to syslog settings, so it can work more effectively over a VPN. Fixes #355

Fix #3235

. diag_nanobsd.php:
. Since conf_mount_ro() is always being called, always call
conf_mount_rw to keep refcount correct
. Do not show refcount_read() return when it's -1
. config.lib.inc
. Increment and decrement refcount even if nanobsd_force_rw is set....

Make the RADIUS settings respect the description of the timeout field. If the timeout value is left blank, use 5 seconds, don't print an error.

Make it more explicit that 'update freq.' unit is days

Remove unused variable

Fix priv name

Optimize DHCPv4 lease display online status for static leases. Do not re-parse complete ARP table for each lease, as it can be slow with large ARP tables.

Fix #3283, use jQuery to change attributes based on id

Set id for select elements created dynamicaly created

Limit CIDR choices for IPv4 on GRE interface, fixes #3277

Fix #3273

- When you disable a interface, it destroys vlan interface from system.
Do not report error when interface doesn't exist.
- While I'm here, use pfSense_interface_destroy() instead of ifconfig

Actually there is no reason to set a variable just to use once

Fix #3242 and some code cleanup:

- Only explode '/' and set address_subnet when address is a subnet, it
fixes issue reported at #3242
- While I'm here, do some cleanup on the way addresses are treated
- Remove unecessary variable $tracker, we already have $counter set...

Fix #3268 - avoid pf table names conflict:

. Create a list of reserved table names for the hardcoded ones
. Use this list to validate aliases and load balance pool names
. Check if alias names don't conflict with LB pool names and vice-versa

some tidying up

make dashboard responsive

added favicon to logged in pages

Replace pfSense with the rebrand

Now that doc.pfsense.org does https and redirects http to https, we may as well send the help links to the https destinations.

Fix display of pools in the LB status widget and on the LB Virtual Server status.

Traffic graphs widget has old interface names

Fixes bug #3245

Merge pull request #810 from ExolonDX/branch_04

Update "status_rrd_graph_settings.php" XHTML

Merge pull request #809 from ExolonDX/branch_02

Update "status_rrd_graph.php" XHTML

Merge pull request #808 from ExolonDX/branch_01

Update "pkg_edit.php" XHTML

require service-utils.inc for find_service_by_openvpn_vpnid()

Add missing td

Remove use of undefined var $conn and fix some td class

Update "status_rrd_graph_settings.php" XHTML

Close INPUT tags
Update HTML Boolean operators
Update TABLE tag with summary statement

Update "status_rrd_graph.php" XHTML

Update SCRIPT statements with CDATA
Move the close HEAD statement
Move the FORM statement outside the main table
Close INPUT tag
Update HTML Boolean operators
Add closing table cell (TD) and table row (TR) tags so that the rows are...

Update "pkg_edit.php" XHTML

Update HTML Boolean operator

Set network interfaces description as interface name.

Respect default gateway option when adding a gateway from interfaces page. It fixes #3230

Allow multiple valid time servers to be entered in the wizard, as they are allowed under System > General

Include the CP zone in the form parameters if one is defined. Fixes access to concurrent graph on zones other than the first/default.

Fix #3218, reaload filter rules when activate or deactivate dhcpdv6

Merge pull request #795 from razzfazz/ia-pd-hint

add option to send prefix hint for requesting desired prefix length for delegation (for master branch)

Merge pull request #803 from PiBa-NL/outboundnat_disable_checkbox

outboundnat, disable rule checkbox

outboundnat, disable checkbox

Split SSL/TLS into separate checkboxes so that plaintext connections can be made secured by using STARTTLS. Support for SMTPS connections should probably be done away with in future. Fixes #3180

Convert mac address to lowercase when saving to avoid duplicates. It fixes #3195

Do not allow local mac address to be added to passtrumac list in CP. It fixes #3122

Fix php short tag opening and silent php -l

Remove call-time pass by reference from traffic shaper files, it should fix #2565

Remove call-time pass by reference for do_input_validation, helps ticket #2565

Add a redirect url option to blocked macs

Delete the old mac when action changes, not the current one

Make captiveportal_passthrumac_delete_entry() return rules instead of execute them as other similar functions do

Use same tab name on all pages

Change 'Pass-through MAC' tab name to reflect current reality

Add actions (block or pass) to Captive Portal passtrumac

Fix indent and whitespaces

Make sure to account for IP aliases on lo0 here, or they get duplicated on each CARP sync

Include CA in generated .p12 file. Fixes #2147 the way it was originally intended.

Test growl whether or not growl is disabled.

Do not sync DHPCv6, it must operate independetly. Ticket #3184

Remove failover peer IP settings from DHCPv6, DHCPv6 doesn't support failover the way that DHPv4 did. Fixes #3184

Fix #3127

By default htmlspecialchars does not consider single quotes, what can be
a problem when value attribute is set using it. Replace value attribute
set to use double quotes on places where it's obviously recieving a
result of htmlspecialchars() call.

Bring back static routes to fix issues reported on Ticext #3179

Disable state killing on gateway failure by default for new configs.
Clarify the text describing the option while here.

Fix issue reported on http://forum.pfsense.org/index.php/topic,66160.0.html

fix text

add option to send prefix hint for requesting desired prefix length for delegation

This change adds an option on the interfaces page for sending a prefix hint for the selected delegation size. If enabled, a "prefix" field requesting :: with the appropriate prefix length (64 - dhcp6-ia-pd-len) is added to the "id-assoc pd" entry in the dhcp6c config file. This hint is required for requesting prefixes shorter than /64 from Comcast.

touch up text, s/nat/NAT/

Merge pull request #787 from phil-davis/master

Provide get_uptime_sec in a common include file

Show a count of the CPUs if more than one is detected, and show how those CPUs are supplied by the hardware.

Use ipprotocol to check gateway protocol, this fix a issue that allow to set more than one default gateway when it's dynamic

Call get_uptime_sec from functions.inc.php

to avoid code duplication

s/require/require_once/g for filter.inc to avoid redeclaration errors in some rare cases.

Add option to specify client management port for OpenVPN client export use

See forum http://forum.pfsense.org/index.php/topic,63668.0.html and OpenVPN Manager GitHub discussion https://github.com/jochenwierum/openvpn-manager/issues/17
This allows a different client management port to be specified for use by OpenVPN client export when generating a client config for use with OpenVPN manager. Typically a company could have multiple offices with OpenVPN "road-warrior" access. Some users might need to connect to different offices at different times, so they would have multiple OpenVPN client configs installed on their laptop. For this to work with OpenVPN Manager, each client config needs to have a different management channel - only 1 can use the default of "166". The company can chooose a different number in the road-warrior server "client parameters" section at each office. Then the generated client config from each office will have a unique management channel port number.

Certificate Manager, for 'Create an internal Certificate' use the correct 'Digest Algorithm'

fix text to remove non-applicable copy/paste from v4 relay

Remove this particular form tag that doesn't appear to serve any purpose on this page, and breaks the drop-down zone selector. Fixes #3153

Add patch from the ticket to fix #3149

Add scope to target when it is a link-local, it helps ticket #3150

Add scope to target when it is a link-local, it helps ticket #3150

remove css

Strip off scope before attempting to resolve the IPv6 IP here.

Fix Diag > Tables AJAX fadeOut after deletion for rows with CIDR mask format.

Merge pull request #776 from CharlieMarshall/helper

improve the look of the pop up helper widget

Merge pull request #772 from CharlieMarshall/jQueryWidgets

convert dashboard progress bars to jqueryUI

fix swap & temp

When renaming or deleting a virtual server, clean up the old relayd anchor name. Otherwise the rules are still there and valid, and will cause problems as they will override the new VS settings. Also clear out the anchors when stopping relayd or starting fresh that way no old settings could conflict.

Also take dhcpv6 into consideration even here.

improve the look of the pop up helper widget

Display pfSense interface name on status interfaces

Sometimes it is a bit difficult to work out which interface descriptive name is which pfSense internal interface name (wan, lan, opt1, opt2...). It is useful to know for:
a) hardware that has wan, lan, opt1... pre-printed on the case (some Alix cases for example), making it easier for less-trained remote office staff to work out which cable corresponds to which interface in pfSense....

Relax advanced options firewall rules tests

Various advanced options are now possible for any protocol since https://github.com/pfsense/pfsense/commit/653bde345e8f960de5bc745fe74e64d8ef3fd2d3
So allow these through the front-end GUI validation also.

reduce height of progress bars

convert dashboard progress bars to jqueryUI

ammend css for jquery progressbars

Fix double-click to edit on OpenVPN CSC entries

Remove prior CSC entry when cleaning up. Fixes #3143

Make sure an alias is not used by a static route before delete, ticket #2941