pfSense

Use aon plugin

Add plugin features to aon edit

Add missing plugin code. Move the pre_write section up a bit.

Merge pull request #1 from EvgenyY/6e2a15e677fa0558ba0c9b1700be38f4065a76f6

Speed/duplex select for interfaces

Bug #1403. Filter Rules description do not get saved when "(quote) present as character

Add note about voucher sync (only enable on slave nodes).

Clarify auth option to include Vouchers

Hiding mediaopt under Advanced button

Fix #1277
Wasn't able to remove the multicast RIPv2 discovery at startup, but
all ripv1 response's are gone now.

Free ipfw rule number after mac pass-through deletion.

Bring more consistent style to CP edit mac and ip passthrough pages.

Remove decimals from cumulative users graph.

Adding a new hook system for firewall nat edit and firewall rules edit page.
Basically if the directory exists it will suck in the files to extend these pags.

/usr/local/pkg/firewall_nat/input_validation
/usr/local/pkg/firewall_nat/pre_write_config
/usr/local/pkg/firewall_nat/htmlphpearly...

• Add is_ipaddr_configured() so that people do not need to reinvent the wheel for this task
• Check to make sure the administrator is not entering the IP address of the same host preventing a issue where the firewall will sync the voucher database to itself and cause the webConfigurator to crash.

Disable csrf checks when posting from scripts.

Provide a voucher_expire function so that voucher can be expired through a POST.

Update some code to be more readble and more compliant to php5

Fix automatic and manual outbound NAT for PPTP. Fixes #954

Fixes #1444. Implements the same fix that issue ermal made in #1522 to the console menu

Adding gui to choose media options for interfaces.

Fix config sync issue. Resolves #1547 Fixed-by: Ermal

Fix clearing of PPTP/PPPoE/L2TP server raw logs. Fixes #1340

Correct password variable name for input validation test on PPTP users. Fixes #1239

Reject alias names that are too long. Fixes #1510

Fixes #1514. Differentiate in the carp settings between layer7, limiter and queues so layer7 and limiters do not rely on queues being active.

Micro optimization.

Fixes #1522. Call interface reconfigure so we bring down the interface and than re-configure it.

Ticket #1534, #1433. Remove custom sync code for vip, since it array_merge() replaces same keys data when merging. But make the code for reloading only changed vips after merge better and some more checks.

Ticket #1534, #1433. Properly merge carp interfaces and do not reload carp interfaces that have not change any configuration parameter. Also make merge_config_section_xmlrpc() an alias for restore_config_section_xmlrpc() since that what it is.

fix missing images for CRLs

Ticket #1534. Serialize all the xmlrpc requests coming to the firewall. Seems such request can stomp into each other and create either corruption of xmlrpc request or other issues.

Make sure all CP form elements are disabled/enabled with the master checkbox.

Fixup MAC display on this other path too

Print the MAC mfg on another line in a smaller font if it's found. Less obtrusive than completely replacing the MAC.

Use base 1000 on user graphs and display cumulative of Total users logged in over the 'x' period.

Ensure that $timestamp is only ever written out if it contains a value and let file be retained through reboots.

MAC prefix to vendor resolution at Status->Interfaces, Status->DHCP leases, Diagnostics->ARP table

Merge branch 'axscode-pfs'

Merge branch 'master' into yakatz-ssl

Merge branch 'drcookie-he.net'

Added HE.net (dns.he.net) to the list of available dyndns services.

Fix interface recognition for diag > arp. It was't seeing wireless interfaces properly.

Fix whitespace.

Sync with dhcp leases reading code.

Fix comment

Also skip the rewind binding state or leases show expired. Reported at http://forum.pfsense.org/index.php/topic,36657.0.html

Revert this change. reload_all() already sends a reload message. Unfortunately there is still something else lurking that causes a delay when loading the wizard step

Use send_event()

Use send_message and issue the reload all operation in the background

Make autocomplete on the login form optional.

Skip step #9 for non pfSense branded installations

Various CRL fixes, handle empty internal CRLs better.

Reload the wizard and then redirect to a wizard completed step. Prompt the user to donate to the project.

Merge branch 'master' of http://gitweb.pfsense.org/pfsense/mterron-clone into review/master

Misc fixes to make the openvpn wizard stop re-creating a CA previously made via the wizard if you re-ran the wizard and chose a CA instead. Fixes #1512

this should be checking for synchronizetoip not pfsyncpeerip

Reorder instructions and do not reload dns if its not allowed from the dns allow override setting.

If we are disabling the radius inputs, also disable the secondary radius inputs.

This field should be server2

Use the availble constant on php for this and also the right value that comes with it since PHP never supported u_int. There is a bug open still on PHP about bcmod but some more info is needed.

Misc OpenVPN CRL selection fixes.

When deleting a CA, delete its associated CRLs.

Correct wrong key for checking if a interface type switched. Ticket #1420

Set default colors explicity, the theme can then override them. This prevents missing colors in themes from crashing the graphs.

If the rrd multiplier is negative, use 5% for out instead of 95% for the 95th percentile line.

Set password on the OS instead of just the gui. Fixes #1485

Remove static routes that are added for dns servers when allow override is allowed when a ppp interface goes down. Code borrowed from dhclient-script.

Ticket #1408. Honor the allow override settings even for ppp devices.

Correct saving of qinq specified members and also correctly destroy parent vlan when deleteing the interfaces. Also take care of attaching to netgraph now that we detach by default.

Correct code description during assignment

fix typo

Comment out debug print

Whitespace cleanup, code cleanup, add choice to filter on ipv4/ipv6 and also accept a subnet to filter on via the host field.

Allow users to select SSL/TLS+User Auth with external authentication sources.

No need to include head.inc twice

Show OpenVPN instances on Status > Traffic Graphs, with descriptions.

Provide a method for rebrands to force a theme. Otherwise upgrading nanobsd from pfSense to a rebrand image without the theme in the config.xml will have a broken GUI since the theme isn't there.

missed a bit of my last commit

Set user when removing privileges, otherwise things like the user's shell would not be reset until pressing save, which is inconsistent with that step not being needed when adding privileges.

Merge branch 'master' of http://gitweb.pfsense.org/pfsense/mainline.git

checking moduli of ssl csr request and response

Reject encrypted CA private keys. Resolves #1446

override option for certificate subject mismatch

Add an option under advanced->misc to specify a proxy for retreiving pfsense package info or downloading packages.

Only start log update ajax timer if the updateDelay is defined. http://forum.pfsense.org/index.php/topic,35771.0.html

Properly set/unset voucher enable/disable bit.

Move the link to add a gateway up next to the drop-down box so it is more obvious.

Test if a variable is set before trying to unset it. If a user has no rules in their config, then $config['filter'] would not be undefined, so unsettings $config['filter']['bypassstaticroutes'] would result in an error. http://forum.pfsense.org/index.php/topic,35702.0.html

Add missing fields for l2tp to define dns and wins servers

Also exclude grep from running processes when grepping for a running packet capture. Also, fix other test to match the recent changes made.

Add a toggle under System > Advanced on the misc tab to enable/disable debug mode for racoon.

Fix copy/paste error

Make sure a theme directory actually exists before blindly using it.

Rework ntpdate_sync_once.sh, so it makes sure ntp/ntpdate/itself are not running before trying to sync time, and then launch ntpd at the end for time sync (last commit was premature)

Don't unconditionally start ntpd after doing ntpdate, it might be disabled.

Send ntpdate output to syslog

Remove extra variable set

Remove copy paste

Unbreak check if capture is running

When using ' variables are not expanded. Use double quotes so that the variable is exanded