pfSense

only trim the / if it is alone

only trim the / at the end of the redirurl

always use the shortcut cpcfg variable

Fix line endings

Correctly retrieve the mac address

Do not exit from php rather return to not have to refork again from the manager

Switch all the actions(pipe create/table modify/get mac address) during fast path of CP to pfSense modules ones.

Remove IPFW_FILTER flag since it gets not used anymore

Add extra check for DHCP static mapping edit pages to prevent an error when no DHCP config exists yet.

Add extra checks for reading and saving certain wireless settings and fix an existing check.

ARP Table Static Entries from Individual DHCP Static Mappings

Assign individual DHCP static mappings as ARP table static entries.
Useful / necessary for sending WoL magic packets from external services / sources, and for any other purpose that needs a static ARP table entry.

Don't allow transport mode to be selected for mobile clients. Fixes #2713

Merge pull request #273 from N0YB/Widget-Firewall-Logs-Filtering

Widget Firewall Logs Filtering

Update usr/local/www/javascript/filter_log.js

Firewall Logs Widget FilteringOptions to filter on interfaces, 'pass', 'block', & 'reject'

Update usr/local/www/widgets/widgets/log.widget.php

Firewall Logs Widget Filtering
Options to filter on interfaces, 'pass', 'block', & 'reject'

license: Bump and fix some copyrights.

The copyright statements have been taken from source archives 1:1

Notes:
- FreeBSD is NOT an Inc. it's the FreeBSD project (and exists since 1992!)
(Took COPYRIGHT from RELENG 8.3)
- ISC changed to an Inc. and does not explicitely state...

Merge pull request #271 from brunostein/master

Add input autocomplete array aliases

add input autocomplete array aliases

Merge pull request #269 from N0YB/Diagnostics-Tables-Top-Status

Diagnostics Tables Top Status

Add input validation to reject invalid combinations of IPv4/IPv6 openvpn protocols and interface/VIPs.

Fix more tests for DHCP relay being enabled.

Remove this now-irrelevant comment.

Fix test to see if DHCP Relay is enabled.

Do a more strict type match here, otherwise if the result returned is 0, that is also "== false" but not actually boolean false.

Merge remote-tracking branch 'origin/master' into Diagnostics-Tables-Top-Status

Be a little more verbose when starting the NTP daemon

Add a couple more (small, optional) snmp modules.

Update usr/local/www/diag_tables.php

String correction

Diagnostics Tables Top Status

Updated: Removed variable from gettext fuction call.
Add table entries count to status line.
Place table status line at top so don't have to scroll to bottom of large tables to see.
Add Download latest bogon data button to bogonsv6 table.

Simplify logic

Only try to get mac if the its required

Update usr/local/www/diag_tables.php

 
Add table entries count to status line.
Place table status line at top so don't have to scroll to bottom of large tables to see.Add Download latest bogon data button to bogonsv6 table. 

Fixes #1575. Allow Match option to be used with limiters as well. The support is there in kernel so allow rules to be configured on this.

The context creation and memmber interfaces are only used during rules creation so make that contained only in init_rules and rule creation functions

Resolves #2529. Load the ipfw module before any commands are executed on CP. Also move the filter_load_ipfw() to captiveportal.inc:captiveportal_load_modules() since no other place uses ipfw(4)

Fix syntax and do not commit late :)

Merge pull request #265 from PiBa-NL/outbound_nonat

outbound nat, remove non-applicable translation option 'any'

Correct syntax

Fix parentheses matching

outbound nat, remove non-applicable option

The pppoe handle script

Correct reload of ppp interface after modifications in the assign->ppps section

Up the char count to include a port number

If destination is larger than 15 then truncate it, otherwise blocks like VRRP advertisements push the values out

remove non-applicable text

Merge pull request #260 from PiBa-NL/outbound_nonat

show difference between outbound NAT and outbound NONAT.

add " address" behind the interface nat name

This is not needed here

Remove other potential places where someone could select a kernel we no longer ship. Try to improve kernel detection a little more.

Add these file so they get added during regeneration

Resolves #2294. Base64 encode the file when sending to the browser same way it is encoded when sent to us. This prevents csrf from mangling things

While I'm here, allow an ICMP rdr.

Only apply this port check for TCP and UDP.

Allow only post action and not get to avoid security problems

Remoev exec_raw.php since its a dangerous page

Commit a revised version of https://github.com/bsdperimeter/pfsense/pull/264.diff

Fix: Repopulate field

show difference between outbound NAT and outbound NONAT.

updated pfSense.pot

Removing unnecessary gettext function calls

To allow limiters to work correctly on mutliwan for now enforce selecting a gateway on outgoing

Update usr/local/www/vpn_ipsec_phase1.php

Correct missing $

Add extra safety belts here.

Remove none per Jim since it is confusing

Remove preload.php which warmed the caches. IT hurts on embedded and really does not help that much

Not sure why this has been hidden so deep but putting that in the right place should help with error displayed related to HEADER already sent in PHP errors.log

Enhance reporting read-write setting

If the user has already selected Current Read/Write Status to be Read-Write, then they also choose Permanent Read/Write the mount refcount becomes 2. Then if they turn off Permanent Read/Write the setting is saved, but the refcount goes back to 1. This results in the file system still being mounted Read-Write....

Allow not setting group authentication

Remove accidental copy/pasto

Correct Select button when no ca_ref is defined

Allow other system authentication types to be used with ipsec. LDAP/RADIUS/local acc

Add button to switch between read/write and read-only on Diag > NanoBSD; Add setting to keep the media read/write at all times; Add indication of ro/rw status on Dashboard.

Fix variable reference, ticket #2679

Resolves #2679. Correct behaviour when port is null to avoid warnings on error log

Resolves #2678. Merge patch suggedted to stop warnings on PHP_errors.log

Cleanup/standardize labels on L2TP config

Adds "Sort by direction" in the Traffic Graph page

Added the option to sort IPs by direction in the Traffic Graph page, and
improved the detection of the local network to monitor (before the
results could not be realistic because of too many "local IPs" were...

Use a random exponent for the RSA generation of keys. Its is questionable if its needed to be saved as a value?

table javascript sorting improvement sorttable 1.2.3.4:123 and *:1234 now sort properly.

Make a function to get the current theme and use it everywhere rather than duplicating code or missing functions. (Fixes forced themes using the wrong theme for login screen)

Include shaper.inc here to have all the function dependency work.

Fix this browser check

And more encoding...

Still more encoding...

More encoding...

Encode this before showing it.

Encode parameters before showing them to users.

Encode some more parameters before showing them to users.

Encode the interface parameter before using it in a redirect

Encode the if parameter before using it in redirects, too.

Conflicts:

usr/local/www/firewall_rules.php

Encode the if parameter before using it in html

Escape parameters better when managing tables. Fix test to allow deleting subnet entries as well as IPs.

Conflicts:

usr/local/www/diag_tables.php

Remove debug output

Set the CSRF Magic timeout to the same as the session timeout, so that if a user sets a lower session time, the CSRF magic tokens do not outlive the user's session.

Update CSRF Magic

Replace deprecated split with explode

Replace deprecated split with explode

now works again

most likely fixes #2638

fix #2639 (country interface selector in interfaces_ppps_edit.php)

also make ppps_edit more jslint ready for good measure

Make the size of the group privilege list the same size as the user privilege list.