pfSense

Do not use tags for vlan interface names since there might be same vlan tags on different parent interfaces and this will break configs and will hide the reason it does not work. Thanks-to: smos@

Forgot to adjust a couple things to fit HEAD again.

Use saner control flow, and also make the charts each use their own data properly.

This should be a relative link

fix link

Fix some issues that didn't make it into the last commit for some reason.

Remove the duplicated page header.

Sync my recent stuff to HEAD. Easy Rule, Log parsing tweaks, Firewall Log filter, Firewall Log Summary graphs. Also add ProtoChart.

Remove unused php file

Fix typo: s/tempalte/template/

clarify log message

correct spelling

Fix local/remote specification.

touch up text

Fix lagg interfaces creation. Reported-by: http://forum.pfsense.org/index.php/topic,16734.0.html

Avoid errors when a non-existent element is called by a function

Submitted-by: Manoel Carvalho

How about some handy links to external IP info sources, with a suitable warning.

It might help if git was actually tracking the file for this...

Add a handy DNS resolution page.

Select lan interface correctly when editing

Present a new package option filter_rules_needed which has a function name to be called if the package needs to create firewall rules. The function should have a switch statement one with 'nat' option wich is called for nat/rdr and one with 'rule' option which is needed for rules. This will help on removing from filter.inc all the packages hardcoded includes and rules and give some more dynamicity. The rules by this function will be included on rules.nat.packages and rules.packages on /tmp partition and called by anchors include file when filter reloads(still this has to come).

Fix the issue reported on http://forum.pfsense.org/index.php/topic,16559.0.html. Basically a missing convertion from 'source'/'destination' to target.

Handle the case when no user has logged in. Reported by: http://forum.pfsense.org/index.php/topic,16382.0.html

Check for blank lines and ignore them.

A better fix to empty lines.

Propperly check for empty slots. Fix by forum user: itsmorefun!

Fix bridge checking missed in previous convert to multi interface capble CP. This is arguably needed since with new bridge the interface might be in full routing mode and be bridged just for SNAP port. Anyway people can run CP on top of the bridge interface itself anyway.

Make CP multi-interface capable.

Actually it needs an ip!

Move firmware update text format to globals.inc

Remove dubious/forgotten unlocking that is uneccesary.

Speedup noticably CP status page. Previously during load it would not show anything and this commit fixes it.

Fix lock leaking on portal_allow function.

Fix PPTP+RADIUS. See ticket #1926.

Fix CARP IP Creation. Subnet check was failing even for valid input. See ticket #1925

Add the state killing for now on VPN's pppoe/pptp/l2tp when the link goes down. For the others some more thought is needed.

The other half of CP locks conversion to new locking functions.

Fix a lock leaking on CP.

• Create two new functions lock($subsystem)/unlock() to have more reliable locking using semaphores.
  This function can sleep till the resource is free and can help find not well behaving code.
• Remove most of the config_lock/config_unlock logics on the whole scripts/pages it is an abuse of this....

Fix OpenVPN automatic shared key generation.

Fix detection of TLS/Shared Key mode for OpenVPN
The wrong variable was being checked, so the result was always false.

From yesterday moving of ipfw loading to only captive portal a regression was noticed on ipfw states sizeing.
Fix this regression by changing this states when they are changed on the system advanced settings page.

Reported by: cmb@

Correctly enforce limits on html input.

Fix server hostname resolve option to correctly be set.

Move validation of dyndns username to the only place it uses it, the GUI page. There it makes sense. While there add ':' character to allow NO-ip subaccounts.

Fix CLI filter parser so it works on FreeBSD 8 builds.

Unbreak log display on FreeBSD 8 based builds of 2.0.
pflog output in FreeBSD 8 spans two lines, so we need a function to collapse those two lines into one line we can parse. Also deal with some other resulting oddities of parsing the new format.

Remove unused function and function that provide the same functionality as php built-in ones.

Move interface groups after Floating and before other interfaces

Reeturn false to prevent page from moving

Allow clicking on the Version and expand it with uname -a via Ajax magic.

Don't display a fake time for a static DHCP lease begin/end. Since it has no beginning and ending, just display "n/a" instead. See ticket #1921.

Fix lease display. It should be displaying the last lease for a given IP, not the first. See ticket #1922

Removed if($instpkg['name']) it hid FreeSWITCH package despite name having a value in the config.

Revert "Call system_routing_configure after changes"

This reverts commit 80efb6d634e23c05a11e87b53bda9cbd9f598d11.

Show interface groups first in the interface dropdown.

Resotre check back seems like empty() does not like 0.

Comment check out seems something is not well with php.

• Convert schedules to pf(4).
  This allows to schedule the whole feature of the rules like queues/limiters/gateways/blocks/allows/etc...
• Whitespace cleaning on filter.inc
• Move schedule backend logic from pfsense-utils.inc to filter.inc and prefix with filter_....

Call system_routing_configure after changes

Remove second include("guiconfig.inc"). Where is my pointy hat to distribute??

Fix "disable checksum offloading", and some other bugs with certain combinations of options while here.

• Do not apply the settings directly from hitting the SAVE button show the apply settings option for consistency with other pages.

Apparent variable name typo, fixes Ticket #1904

touch up text

Remove DHCP leases for MAC addresses that now have static/fixed addresses. If these are not cleared, DHCP complains in the logs about duplicate leases.

Move dhcp lease delete button to the end, and change comments to match style of others nearby.

Show interface names in uppercase.

Clean up text

Add ability to remove DHCP leases.
Use "x" icon to delete the lease.
Said icon only appears next to "offline" dynamic leases

Fix broken OpenVPN client config. See http://forum.pfsense.org/index.php/topic,15608.0.html

Cosmetic fix - two words were split with hyphenation that didn't look right in the WebGUI.

Remove "Allow IPv6" option from Firewall/NAT tab, it's already on the Networking tab with other IPv6 options.

allow a diff ip address for gateway monitor

Use * instead of Default for consistency

clarify description

Fix OpenVPN instance port change.
It had been failing on any change, including valid unused choices.

don't kill routed unless it's running to avoid error in system log

Merge branch 'master' of git@rcs.pfsense.org:pfsense/mainline

fix typo, clean up text

Add some smarts so that it always shows the 1st found quality database with Static gateways
Replace ifthenelse with a switch

clean up text

clean up text

Block all IPv6 traffic by default, since IPv6 isn't supported, there isn't any way to add such rules in the GUI, and nearly all users won't want IPv6 to traverse their firewall at this point. Add "Allow IPv6" checkbox to disable this behavior.

fix order

Since they're listed by name, order alphabetically.

clean up text

Configurable filtering for Services Status widget

Add Use PowerD

Add missing spacing before PowerD section

Add power savings header

Adding PowerD knob to system -> advanced -> misc. This will be useful
for folks wishing for their firewall to use less power overall. Blurb
from the powerd man page from freebsd:

The powerd utility monitors the system state and sets various power con-...

Fix include for gmirror status widget

New Widget: Gmirror Status

Fix log widget title/link

• Share filter log parsing code instead of using copy/paste/code duplication.
• Reworked the JavaScript a little so it could also be shared
• Fix a large number of bugs, especially in the AJAX-based dynamic log viewer.
• Picks up some more detail from the logs, and more accurately determines the protocol of a given log entry....

Optimize adding new members to QinQ to evitate recreating the whole QinQ members.

• Convert the QinQ code to use a file where the commands are passed. This speeds up most of the vlan creation.
  Before you'd need 20min to create qinq with 1000 member now it adds 2000 members in just 1 minute
• Fix some cleanups when deleting QinQ

Do not show an * in schedule box. No schedule is applied for block private.

Do not show massive amount of members but just what can be shown on the gui

Fix dump_clog to handle fifolog and clog timestamps and entries.