pfSense

Patch from EvgenyY to allow editing an existing p2 without it being flagged a duplicate.

Add "Default" choice that will unset the media/mediaopt, otherwise whatever is first in the list is saved in the config.

Correct input object name from wrong copy/pasto. Reported-by: http://forum.pfsense.org/index.php/topic,37369.0.html

Merge remote branch 'origin/master'

Bug #1560.IPsec GUI needs to reject duplicate subnets in phase 2s for a given phase 1 (improvement of previous patch)

Make the ICMP echo request type less ambiguous, and since it's likely the main one to get used, move it to the top.

Add tunable, by default disabled, to enable the default gateway switching feature when the default one 'disappears'.

Fixes #1412. Properly pass the page to match so users are not always presented with the change password screen. Proper fix.

Fixes #1412. Properly pass the page to match so users are not always presented with the change password screen.

Ticket #944. Also destory the previous interface if the user changing the vlan tag of an existing vlan entry.

Fixes #944. Use the correct interface name to destroy the previous vlan if the parent is changed.

Bug #1560. IPsec GUI needs to reject duplicate subnets in phase 2s for a given phase 1(site-to-site).

Use array_overlay()

Use array_extend

Remove debugging code

Add merge handler code

Remove bogus protection. We have better handling of this now.

Merge remote branch 'origin/master'

Bug #1560. IPsec GUI needs to reject duplicate subnets in phase 2s for a given phase 1(mobile clients).

Bug#1528. Automatically create outbound NAT rules on WAN for localhost when switching to manual.

Use aon plugin

Add plugin features to aon edit

Add missing plugin code. Move the pre_write section up a bit.

Merge pull request #1 from EvgenyY/6e2a15e677fa0558ba0c9b1700be38f4065a76f6

Speed/duplex select for interfaces

Bug #1403. Filter Rules description do not get saved when "(quote) present as character

Add note about voucher sync (only enable on slave nodes).

Clarify auth option to include Vouchers

Hiding mediaopt under Advanced button

Free ipfw rule number after mac pass-through deletion.

Bring more consistent style to CP edit mac and ip passthrough pages.

Remove decimals from cumulative users graph.

Adding a new hook system for firewall nat edit and firewall rules edit page.
Basically if the directory exists it will suck in the files to extend these pags.

/usr/local/pkg/firewall_nat/input_validation
/usr/local/pkg/firewall_nat/pre_write_config
/usr/local/pkg/firewall_nat/htmlphpearly...

• Add is_ipaddr_configured() so that people do not need to reinvent the wheel for this task
• Check to make sure the administrator is not entering the IP address of the same host preventing a issue where the firewall will sync the voucher database to itself and cause the webConfigurator to crash.

Disable csrf checks when posting from scripts.

Provide a voucher_expire function so that voucher can be expired through a POST.

Update some code to be more readble and more compliant to php5

Fix automatic and manual outbound NAT for PPTP. Fixes #954

Fixes #1444. Implements the same fix that issue ermal made in #1522 to the console menu

Adding gui to choose media options for interfaces.

Fix config sync issue. Resolves #1547 Fixed-by: Ermal

Fix clearing of PPTP/PPPoE/L2TP server raw logs. Fixes #1340

Correct password variable name for input validation test on PPTP users. Fixes #1239

Reject alias names that are too long. Fixes #1510

Micro optimization.

Fixes #1522. Call interface reconfigure so we bring down the interface and than re-configure it.

Ticket #1534, #1433. Remove custom sync code for vip, since it array_merge() replaces same keys data when merging. But make the code for reloading only changed vips after merge better and some more checks.

Ticket #1534, #1433. Properly merge carp interfaces and do not reload carp interfaces that have not change any configuration parameter. Also make merge_config_section_xmlrpc() an alias for restore_config_section_xmlrpc() since that what it is.

fix missing images for CRLs

Ticket #1534. Serialize all the xmlrpc requests coming to the firewall. Seems such request can stomp into each other and create either corruption of xmlrpc request or other issues.

Make sure all CP form elements are disabled/enabled with the master checkbox.

Fixup MAC display on this other path too

Print the MAC mfg on another line in a smaller font if it's found. Less obtrusive than completely replacing the MAC.

Use base 1000 on user graphs and display cumulative of Total users logged in over the 'x' period.

MAC prefix to vendor resolution at Status->Interfaces, Status->DHCP leases, Diagnostics->ARP table

Merge branch 'axscode-pfs'

Merge branch 'master' into yakatz-ssl

Merge branch 'drcookie-he.net'

Added HE.net (dns.he.net) to the list of available dyndns services.

Fix interface recognition for diag > arp. It was't seeing wireless interfaces properly.

Fix whitespace.

Sync with dhcp leases reading code.

Fix comment

Also skip the rewind binding state or leases show expired. Reported at http://forum.pfsense.org/index.php/topic,36657.0.html

Revert this change. reload_all() already sends a reload message. Unfortunately there is still something else lurking that causes a delay when loading the wizard step

Use send_event()

Use send_message and issue the reload all operation in the background

Make autocomplete on the login form optional.

Skip step #9 for non pfSense branded installations

Various CRL fixes, handle empty internal CRLs better.

Reload the wizard and then redirect to a wizard completed step. Prompt the user to donate to the project.

Merge branch 'master' of http://gitweb.pfsense.org/pfsense/mterron-clone into review/master

Misc fixes to make the openvpn wizard stop re-creating a CA previously made via the wizard if you re-ran the wizard and chose a CA instead. Fixes #1512

this should be checking for synchronizetoip not pfsyncpeerip

If we are disabling the radius inputs, also disable the secondary radius inputs.

This field should be server2

Misc OpenVPN CRL selection fixes.

When deleting a CA, delete its associated CRLs.

Correct wrong key for checking if a interface type switched. Ticket #1420

Set default colors explicity, the theme can then override them. This prevents missing colors in themes from crashing the graphs.

If the rrd multiplier is negative, use 5% for out instead of 95% for the 95th percentile line.

Set password on the OS instead of just the gui. Fixes #1485

Correct saving of qinq specified members and also correctly destroy parent vlan when deleteing the interfaces. Also take care of attaching to netgraph now that we detach by default.

Correct code description during assignment

fix typo

Comment out debug print

Whitespace cleanup, code cleanup, add choice to filter on ipv4/ipv6 and also accept a subnet to filter on via the host field.

Allow users to select SSL/TLS+User Auth with external authentication sources.

No need to include head.inc twice

Show OpenVPN instances on Status > Traffic Graphs, with descriptions.

Provide a method for rebrands to force a theme. Otherwise upgrading nanobsd from pfSense to a rebrand image without the theme in the config.xml will have a broken GUI since the theme isn't there.

missed a bit of my last commit

Set user when removing privileges, otherwise things like the user's shell would not be reset until pressing save, which is inconsistent with that step not being needed when adding privileges.

Merge branch 'master' of http://gitweb.pfsense.org/pfsense/mainline.git

checking moduli of ssl csr request and response

Reject encrypted CA private keys. Resolves #1446

override option for certificate subject mismatch

Add an option under advanced->misc to specify a proxy for retreiving pfsense package info or downloading packages.

Only start log update ajax timer if the updateDelay is defined. http://forum.pfsense.org/index.php/topic,35771.0.html

Properly set/unset voucher enable/disable bit.

Move the link to add a gateway up next to the drop-down box so it is more obvious.