Validate firewall rule advanced options requirements
Checks that the user has selected a TCP Pass rule etc when using the state-related advanced options. Validates as per the checks that are applied in filter.inc when generating the actual pf rules.Forum discussion: http://forum.pfsense.org/index.php/topic,64653.15.html...
When adding Port or URL alias default the alias type
When viewing the Port or URL aliases tab, and pressing "+" (add), make the default alias type match the Port or URL tab from which the user pressed "+".
Fix editing saving dhcp6prefixonly state
Reported in redmine #3097 and forum http://forum.pfsense.org/index.php/topic,64483.msg350255.html#msg350255
3652 days worth is a too much. Scale it back to more reasonable 1.25 x maximum used data (2284 days).
Use default RRD colors that are a little more visually distinct. Add some better comments/labels to make it easier for people to help customize and tweak the colors. Suggestions welcome.
Disable the BEAST protection by default because the GUI will break if you use this and have a Hifn card installed. Others may break similarly. Change it into a checkbox option, off by default, and automatically disable it if a conflicting card has been detected.
This is not a percentage
Remove remaining hardcoded theme names
Add LDAP server options to control UTF8-encoding of parameters. Fixes #2227. While I'm here, add a checkbox to prevent the stripping of @ from the LDAP username if the user wants the full name transmitted.
Some more tweaks to state and mbuf update/output on dashboard widget.
Use some easier to distinguish colors for mbuf graph
Add a meter for states, too
Fixup mbuf stats function
Make mbufs update via ajax
Fix ids
Fix an occasional "blank" cpu freq printing that shouldn't happen.
Make mbuf usage a meter, too.
Show totals for memory, swap, and disk usage.
Add an RRD graph for MBUFs under system. Tweaks welcome.
If an account has SSH keys, show them, don't show the checkbox to add keys. Fixes #2729
Merge pull request #682 from CharlieMarshall/pfsense_ng_fs
new theme "pfsense_ng_fs" & allow themes to add / delete additional widget columns
Substitute Product name in privileges
properly handle custom-v6 dyndns entries in web interface
Merge pull request #703 from razzfazz/dyndns_custom_v6
Add support for HE.net AAAA record updates. Fixes #1825.
Add independent logging choices to disable logging of bogon network rules and private network rules. Add upgrade code to obey the existing behavior for users (if default block logging was disabled, so is bogon/private rule blocking). Also add a checkbox to disable the lighttpd log for people who don't want their system log spammed by lighty.
Fix the "use ICMP" function for traceroute.
Fix #3079, add a section for DHCPv6 Server backup
Implement URL Table aliases for ports instead of IP addresses
fix description
touch up text
Add support for protocol 41 in rules. Fixes #3007.
Change separator as per JimP's request.
Add front-end support for dyndns AAAA updates
Make dashboard update check respect nanobsd-vga, probably fixes #3078
Correct month, quarter (3 months), and 4 year RRD graphs length.
Longest possible month is 31 days, not 32.Longest possible quarter (3 months) is 92 days (30+31+31), not 93 (31+31+31).4 Years is 1461 days (365 x 4 + 1), not 1464 (366 x 4). Except about once every century or so when leap year is skipped 4 years is then 1460 days. But that is not going to happen again for a very long time. Unfortunately pfSense, nor anyone alive today will probably still be alive by then.
Remove unecessary variable
Fix #2962, allow to remove VIP if gateway IP is on the interface's subnet
fix typo
Remove unecessary var initialization
Fix a small issue when disable a boolean option and save, it shows option as enabled
Fix whitespaces
Remove extra { wrongly added on last commit
Fix set/unset of checkaliasesurlcert
Process zipped aliases list
Use download_file() and check ssl certificates
Remove useless code
Add an option to check certificate for https URL aliases
Add a new alias type, URLs containing Ports
Remove errant double quote.
Add server IP column and cached IP display to RFC2136 host list.
Add option to RFC2136 to find/use the public IP if the interface IP is private. (Off by default)
Fix double click row to edit for rfc2136
Add cached IP support to RFC2136, add GUI button to force update for single host.
Correct variable used to delete symlinks and files delete from CP filemanager. Reported-by: http://forum.pfsense.org/index.php/topic,64016.0/topicseen.html. While here reduce some uneeded extra operations
Add the interface's descr after the pool name.
Merge pull request #686 from Klaws--/master
Added previously missing class selectors cs1-cs7 plus VA (voice-admit), plus the TOS values which still work with DSCP
Definitely requires my patches to the kernel patches to work (dscp.RELENG_*.diff). OTOH, it is currently broken anyway, so wahtever happens, it cannot get more broken. ;-)...
RRD Specify RRA and Resolution
Don't leave it up to RRD Tool to select the RRA and resolution to use.Specify the RRA and resolution to use per the graph havg value.
Adjust archives array values to match sizes for average calculation.
Archive start is “now” minus archive length. Not “end” minus archive length. Sometimes "end" is not "now".
Add a checkbox that can be used to request only a IPv6 prefix without a IPv6 address. Some ISPs DHCP6 servers will fail the request if both are requested and only a Prefix is allowed.
Conflicts:
usr/local/www/interfaces.php
Merge pull request #684 from N0YB/Advanced_DHCP_Client_Options
Add show/hide to the new "Reject Leases From" row
fix typos
Show for Basic and Advanced. Hide for Config File Override.
change css & jquery to allow for multiple columns for themes ending in _fs
update loader.js - add jquery to display additional column button and create/delete columns
update css to fit full screen
Merge pull request #671 from wrboyce/master
allow defining dhcp static mappings using dhcp-client-identifier
Merge branch 'Advanced_DHCP_Client_Options' of https://github.com/N0YB/pfsense into N0YB-Advanced_DHCP_Client_Options
Conflicts: usr/local/www/interfaces.php
clone pfsense_ng theme
Fix CP status sorting to properly respect the zone.
Add a note about the LDAP hostname matching the server cert's CN.
Add option and code to sync Auth servers with XMLRPC.
Merge pull request #674 from PiBa-NL/SystemGroupmanager_16charName
System: Group manager, set max length for groupname to 16 characters
Use Probe Interval on gateway advanced settings
Correct gateway down/probe interval text.
Allow removing CA and Cert entries that are blank/empty. Fixes #3005
Add an option to force IPsec to reload on failover, which is needed in some cases for IPsec to fail from one interface to another. Ticket #2896
Add a field to allow rejecting DHCP leases from a specific upstream DHCP server.
Change test after IPsec apply to check for any value >= 0. If a user has hostnames vpn_ipsec_configure() now returns the number of hostnames, so the previous test failed and the "apply changes" button would never go away.
Allow user to set interval between attempts to resolve hostnames configured on aliases
fix dhcp static mapping/client identifier validation
not true you have to log in again since HTTP basic auth was deprecated.
add MSS clamping to setup wizard. Now that MTU and MSS are separate, the MTU description was wrong, and both need to be there.
Fix max length for wpa passphrase, it fixes #3034
Allow queues to be deleted, it fixes #3037
Update list of mobile service providers
Fix exec perms on mail.php
Add a simple CLI mail script capable of sending an SMTP message using echo/piped input, e.g. ifconfig -a | mail.php -s"ifconfig output"
EAOrigin.pat - Traffic Sharping Layer 7
The EA Store is now Origin, Tested and works (for now) will make changes if i come to anything useful.
Add the ability to disable Growl or SMTP notifications but keep their settings intact. Remove automatic test messages on save. Add individual test buttons for Growl and SMTP that work even if the service(s) are disabled.
Don't restrict the content of descr when making CA/Certs, it's free-form.
Actually do not allow the loop to continue. Related to Ticket #1928
SWF
As said on the pFsense forum http://forum.pfsense.org/index.php/topic,62863.0.html It works and tested by me.
Status-Queues: Get the stats gauge for PPS or bandwidth
Let the user select the values to show in the stats gauge between PPS and bandwidth.
Allow selecting "Localhost" as an interface for IP Alias VIPs - this way you can make IP Alias VIPs to use for binding in a routed scenario with CARP without creating an IP conflict.
Correct mouseover description for adding a certificate. Fixes #3017