pfSense

override option for certificate subject mismatch

Add an option under advanced->misc to specify a proxy for retreiving pfsense package info or downloading packages.

Only start log update ajax timer if the updateDelay is defined. http://forum.pfsense.org/index.php/topic,35771.0.html

Properly set/unset voucher enable/disable bit.

Move the link to add a gateway up next to the drop-down box so it is more obvious.

Test if a variable is set before trying to unset it. If a user has no rules in their config, then $config['filter'] would not be undefined, so unsettings $config['filter']['bypassstaticroutes'] would result in an error. http://forum.pfsense.org/index.php/topic,35702.0.html

Add missing fields for l2tp to define dns and wins servers

Also exclude grep from running processes when grepping for a running packet capture. Also, fix other test to match the recent changes made.

Add a toggle under System > Advanced on the misc tab to enable/disable debug mode for racoon.

Fix copy/paste error

Make sure a theme directory actually exists before blindly using it.

Rework ntpdate_sync_once.sh, so it makes sure ntp/ntpdate/itself are not running before trying to sync time, and then launch ntpd at the end for time sync (last commit was premature)

Don't unconditionally start ntpd after doing ntpdate, it might be disabled.

Send ntpdate output to syslog

Remove extra variable set

Remove copy paste

Unbreak check if capture is running

When using ' variables are not expanded. Use double quotes so that the variable is exanded

Don't test for a user cert here either, see previous commit.

Don't test if a cert is in use here, you could in theory use a cert for a user and a server.

Fix link; use same message for missing certs.

Make the default openvpn cert authority message a bit relaxed and let user know about the wizard option as well

Correct text to include PPTP as well.

Resolves #1391. Bring back VPN auto rule disable advanced setting.

Resolves #1418. Correct test to actully do what's intended.

Make sure all themes have the right colors defined.

<script/> tags are put in the function build_javascript no need to put them here. Prevents errors reported at:http://forum.pfsense.org/index.php/topic,34139.0.html

Switch back to dev_mode so existing configs aren't broken by the other changes.

standardize the device_mode variable

Try again to fix the calculation for out bits 95th percentile. (Works for me)

clarify text

Apparently rrdtool VDEF functions can't take a multiplier, only CDEF. Fixes traffic graphs.

Allow editing of CAs, so that imported CAs can have their private keys added later (mainly affected users upgrading from 1.2.3 and wanting to use the cert manager). Also, allow editing the CA's serial, since this shouldn't really be 0 for imported CAs, but the serial of the last cert that was made from this CA.

Allow importing a CRL for an external CA.

Add missing color, add multiplier to calculus for inverting line

Fix spamd rrd graph command.

In IPsec, s/mobileclients/client/, this was changed long ago in the config but not everywhere followed.

Test the existence of route_vpn_gateway variable and if set use it as a gateway. Recommended-by: http://forum.pfsense.org/index.php/topic,24436.msg158589.html#msg158589

Correctly synchronize the db of vouchers from master. Also correctly write it to the files since before it is only allowed during bootup and not from xmlrpc.

Actually remember that the vouchers are enabled

Allow to enable vouchers with the only things specified the voucher database synchronization since the other values will be fetched from it.

Note that disabling does not survive a reboot

fix text

Unbreak adding subqueues to limiters. Correct some text in the way.

Add all to the reserved keywords

Merge branch 'master' of rcs.pfsense.org:pfsense/mainline

Update GUI to enable L2TP client configuration.

Add missing "Connect/Disconnect" button to GUI for L2TP client connections.

Select the device mode to tun if variable device_mode not exist in the configuration

Added option to select the type of device for use in the tunnel openvpn

fix text

Add Total number of CP users graph

Hopefully improve the useless ipsec logs with highlighting

Fix ticket #1354

ipfw is not referenced here.

Do more strict checking if an ppp type interface is assigned before starting the mpd process behind it. Trigered-by: http://forum.pfsense.org/index.php/topic,34377.0.html

Prevent the command wol for being called without propper ip information. Reported-by: http://forum.pfsense.org/index.php/topic,34314.0.html

Fix typo

Clarify text on outbound NAT page.

Add the 95th percentile line to the traffic graphs

Add missing image. Fixes #1339

Fix typo

Enforce session establishment.

Enforce session establishment.

Enforce session establishment.

Add missing pages to the authentication system.

• Prevent concurrent logins on CP to not be recorded on the DB.
• Make the locking more complex to avoid locking exclusively during pruning task which would hurt a lot CP performance.
• Retire the disconnect_client and make all the disconnect functions use the sessionid as identifier....

Make sure we tell the code that the interface exists otherwise multiple laggs might get created.

Ensure the protocol on the firewall rule from the OpenVPN wizard ends up lower case, or it causes some GUI irregularities. Seen http://forum.pfsense.org/index.php/topic,33865.0.html and elsewhere.

Show friendly names of interface for root queues of ALTQ.

Add GUI option to CARP settings for syncing certs. It was in the backend code but not the GUI. Fixes #1316

Add the toggle to disable successful login messages, show actual help text for redirect item

Fix page title text. Replace "Firewall" with "Interfaces" in title.

Remove custom code for checking ip_addr and use the pfsense provided one.

Do not be so drastic on normal failure.

More fixes to comments and code for upnpd. Also bring up to speed the stop/start logic.

Improve logging and some tests during miniupnpd config generation.

This is not true anymore as piece of code.

Correctly get only the interface mac address rather than any other found mac on this interface.

Use the call to basename to remove the extension rather than trim, since trim takes a list of characters, not the exact string to remove. Suggested by http://forum.pfsense.org/index.php/topic,32967.0.html

This is not NAT, so put it under the Firewall Advanced heading instead.

Fix page title.

Only make gateway changes if we have been given a new gateway IP.

Setup gateway monitoring since we just altered a gateway.

Fix gateway handling in setup wizard.

Only display gitsync settings on supported platforms.

Only show the you can monitor the filter reload process for filter related changes

Flush the buffer

Do a more strict check on the return value of the download function. Fixes #1309

Correct the test which displays an error if someone chose to save+test but doesn't have an ldap backend. Also, fix a typo.

Make sure to resolve the gateway name before passing it off to the IPsec reload function

Correct variable name. This could never have deleted the static route for IPsec vpns on multi wan

Don't forget to clear username field so it doesn't show up on next edit.

And if for some reason user enters a username, store it for them.

Try again, a little cleaner: Prevent GUI from giving error for freeDNS service since username and password

Revert "Prevent GUI from giving error for freeDNS service since username and password"

This reverts commit 740f745922549283e29d3d964c7a60266d7dbf0a.

This is a little ugly. Let's do it a little differently.

Prevent GUI from giving error for freeDNS service since username and password
aren't required.

Also add a note for freeDNS users to enter "Authentication Token"
in Hostname field. Zero out fake username and password before writing to config
so they don't show up in the GUI when you edit the record again.

Add a check if the configuration of dhcpd exists for wan before unset, resolves #1303

Remove direction from traffic shaper generated rules now that the match action is present to correctly put packets on proper queues. Before it was not possible since this would have also open firewall ports/holes.

Reset this var before this test, otherwise if the test is skipped, it will carry over the value from the previous run.

Move all functions from index.php for captiveportal.inc