pfSense

Adjust the +CPIN? cmd so it works for huawei 3G sticks too

List logged-in IPsec xauth users and provide a mechanism to disconnect them. Implements #1986

Conflicts:

usr/local/www/diag_ipsec.php

Switch to a common function to determine anti-lockout ports, and fix a bug that was getting the ports wrong with custom https+redirect on.

Don't skip "lan" as a possible WAN for shaper, since someone could have renamed/repurposed it. Someone may shoot themselves in the foot if they pick it accidentally, but otherwise some valid configs may be prevented accidentally.

Include movable code to reorder list,save button, domtt title messages, also base64 decode option, description and custom text to checkbox fields.

New options need xml config to be included on package xml files, so no changes to packages that do not use these functions....

Fixup halt and reboot to catch the output from the shutdown process properly.

On its own, ntpd does not sync fast enough at bootup, so bring back the ntpdate sync but improve it so it can't get stuck forever.

Conflicts:

etc/rc.newwanipv6

Fix syntax here too in case we need to revive it.

Use a text description instead of a code.

Add NTP status page using ntpq.

With FreeBSD's ntpd, the current options are irrelevant, but we can have a nice status page

Conflicts:

usr/local/www/fbegin.inc

Fix ntp name here too

Conflicts:

etc/inc/priv.defs.inc

s/OpenNTPD/NTP/ for log pages and menu entry, to save space (and make it easier if we switch)

Conflicts:

usr/local/www/diag_logs.php
        usr/local/www/diag_logs_auth.php
        usr/local/www/diag_logs_dhcp.php
        usr/local/www/diag_logs_filter.php...

Fix redirect when saving settings in the widget, it was landing on the widget page instead of returning to the dashboard.

Make the ppp-linkup script understand both address families.

Add _ to the list of are allowed characters

fix typo

Revert "Make vips vhid be unique per parent interface!" - per cmb, this should not have been on RELENG_2_0 see ticket #2415

This reverts commit 4d0c032c528b10221a2ef894b5eca34f6fda39a7.

Conflicts:

etc/inc/openvpn.inc
        etc/inc/upgrade_config.inc...

Update zoneinfo using latest zones from FreeBSD

$realif only exists on apply, which this code path would never touch. Change to use the configured interface instead. Fixes #2212

Fix missing description in rowhelper.

When the "OpenVPN" users type was commented out of the drop-down, this function wasn't adjusted so it was off by one in its counts, making the URL table update frequency box disabled.

Fix display of widgets with configuration controls in IE. From Gertjan on the forum. See http://forum.pfsense.org/index.php/topic,42977.0.html

Fix preservation of the selection of interfaces on input errors for floating rules.

When renaming a user, make sure to remove the previous user or it gets left in /etc/passwd.

Add alias support to static routes (needs some testing) Ticket #2239

Merge pull request #77 from Whizkidzz/RELENG_2_0

Releng 2 0

Added "interface_selection" type to enable interface selection in tinydns server
This is usefull in multiwan setup and to check if a server behind pfsense is still running.
So that tinydns can change the corresponding records

Make vips vhid be unique per parent interface!

Fix newlines

Remove unused code

Fix pattern upload, button text check was incorrect.

Update help text for Host alaises to indicate FQDNs are allowed.

Fix for this: http://redmine.pfsense.org/issues/2037
Just changed some padding/margin in the CSS in order to avoid wrapping the menu.
Tested with Firefox 8, Chrome 15.0.874.121 and IE 9.

Show lagg protocol and member interfaces on Status > Interfaces. Implements #2242

Carry over the key length on input errors when creating a certificate signing request. Ticket #2233

Change case of "NOTE" for consistency with the pages for the other tabs.

ARP table is singular

Add button to download a .p12 of a cert+key. Implements #2147

Reject an interface without a subnet as a network source in the IPsec Phase 2 GUI. Fixes ticket #2201

Change to embed to prevent IE9 from misbehaving. Ticket #2165

Unset previously set voucher sync information

Don't use $pconfig in widgets, it has unintended side effects.

Change SNMP binding option to work on any eligible interface/VIP. Fixes #2158

Correct getNasIP in 2.0.x branch to be correct. There is no multi-zone support in 2.0.x

Correct the Called-Station-Id attribute setting to be consistent on the data sent

Correct the Called-Station-Id attribute setting to be the same on STOP/START packets

Fix ssh key note to refer to DSA not just RSA since both work.

Check userid better here, 0 is also valid

Fix permission and certificate display for the admin user

Cleanup html, make tables sortable, implements #2040

Clarify the potential pitfalls when setting the Frequency Probe and Down parameters.

fix text

"Destination server" is a required field

Local port must be specified, fix input validation

Don't let the browser auto-fill username and password on voucher config, as it can interfere with the settings being properly saved if sync isn't fully configured, which this can make happen accidentally.

Do not redirect on saving services status widget, the headers have been sent by this point and it can't happen.

Add a checkbox that disabled automatically generates negate rules for directly connected networks and VPNs
Ticket #2057 in redmine

until 2.0.1 is tagged, Revert "Add a checkbox that disabled automatically generates negate rules for directly connected networks and VPNs"

This reverts commit 9ae39b01fb7dfd9c27091e3fae7e034e9e115519.

Add a checkbox that disabled automatically generates negate rules for directly connected networks and VPNs
Ticket #2057 in redmine

Some sections should just be copied and not merged or we end up unable to sync the deletion of the last item in a section.

Require guiconfig.inc

variable is not yet available so rebrands get a blank page on the last step in the setup wizard

When making a server certificate in the wizard, make sure we specify it must be a server certificate.

Describe the serial field on imported CA more clearly. Resolves #2031

Fix for redmine ticket #1993. Allow saving multiple dynamic entries.
Make sure that return_gateways_status() also returns all gateways that have monitoring disabled as up.

Resolves #2018. Add an id to the html object to make javascript work

Actually save the value typed in the bandwidth limit box for the openvpn client instead of ignoring it.

Check uppercase strings

Ensure style is set to a valid item

When creating an internal certificate, offer the user a choice of what constraints to place upon the certificate (CA, Server, or User).

Actually reflect the end time instead of always $now.
Fix Ticket #1990

Fix display of CARP widget to properly show Disabled status, bring code more in line with the carp status page, and clean it up a bit.

If sticky is enabled, show a tab under Diag > States to view the source tracking table and clear it if needed.

description is optional

description is optional

Reformat the DNS Forwarder page a bit so it conforms with the other pages. Add some headers to make it more clear what each section does. Cosmetic changes only.

Assume a default value of 1 for cert_depth to disallow chaining.

Add GUI option to limit the certificate depth allowed when OpenVPN clients are connecting.

Fix up syslog settings a bit, add some missing options, fix formatting of syslog.conf, correct behavior of 'everything', code cleanup.

Show RTT and Loss on Status > Gateways, not just on the widget

Don't run ldap_urlchange on page load if there is a custom port, otherwise it appears to ignore a custom LDAP port even when it's correct in the config.

fix text

More typos/text fixes.

Fix typo

Fix typo

Add missing ?, fix uname display. Fixes #1960

Fixes #1948. Do not specify an interface for the Voip rules that intend a source ip.

Revert "Add zone. Fixes #1945"

This reverts commit 8a880cb97227c3cd41ed236d06e3188f97cea2ee.

Add zone. Fixes #1945

Move hostapd to its own log and tab, so it stops spamming the system log.

Show session detail in Virtual Server status

Clarify text/settings for media selection. Fixes #1910

Add relayd to Status > Services and widget. Add capability to kill when restarting instead of a simple reload. Implements #1913

Fixup relayd to handle DNS load balancing as well as standard TCP load balancing.

Bind the state killing to the interface they should kill the states so that it does not impact other services like in #1421

Fixes #1874. Correctly error out when the user or the pass is not posted during login of CP.

Check if a widget is null before testing a property. Fixes skipped updates on certain widgets (like the gateway widget) if someone doesn't have the cpu widget file on their fs (which a clean install does not).

Revert "Another try at prventing panic on reconfig of ppp type wans. Ticket #1696"

This reverts commit 55a14b686d8f35d03b87efdbddacb656a04f5bed.

Revert "Be correct on teh variable scope"

This reverts commit bf81eb22db36646ebf762600a3b4959c8c5214b0.