Captive portal spelling
Standardise text in priv list
Simplify cron array comparison
This works fine - I had not thought about how arrays are compared. Using "==" checks that the key/value pairs match in both arrays, regardless of the order the arrays happen to be in, which is what we want here.Using "===" would insist that the key/value pairs are also in the same order in the array and that the types and everything match identically, which we do not require.
Minimise config updates when checking cron jobs
Backout pull request #1391
https://forum.pfsense.org/index.php?topic=85944.0
Backout pull request #13191
Fix unbound shortcut links
Fixes redmine #41511) Make the naming in shortcuts.inc more clear - forwarder=dnsmasqresolver=unbound2) Make the value of $shortcuts_section correct in each dnsmasq andunbound php code3) Make diag_logs_resolver.php smarter, so if dnsmasq is enabled, then...
clarify message here after customer feedback, it wasn't meant to imply "only a reboot will re-enable" but that's how some people have read it.
Update /etc/ttys from new partition when upgrading nanobsd, and in this case do not call reload_ttys(). It should fix #4140
Remove unused variable
Move this check before full sync to disable dnsmasq/unbound in the first time it's sync'd
Add dnsmasq and unbound config sections to full sync, it fixes #4076 that is caused because boolean config fields are not disabled on secondary
Display tunnel description on IPsec widget
There was not even code to attempt to display the description.Also, when I first created a phase1 and there were no phase2 yet, the widget spat out the warning for the line:foreach ($config['ipsec']['phase2'] as $ph2ent){ ......
Correct even other areas of CP using pfSense_ipfw_getTablestats function.
Correctly call function for retrieving stats from ipfw. Fixes #4131
Fixes #4130 Check for a certain size of file to start showing data on dashboard and avoiding xml parser errors
Fix displaying description for IKEv1 connected tunnels
Oops remove variable with same name unused!
Add checks for ghost phase2 and no need to check for number of phase2 here
Correct skipping of disabled tunnels
Make this function readble
Correct status counter of inactive tunnels
Merge pull request #1395 from wagonza/RELENG_2_2
Oops do not override ipsec status array!
Reboot not required for password protect console menu
On my systems I can toggle and save "Password protect the console menu" back and forth and the console switches back and forth from the menu to a login prompt in real time. IMHO a reboot is no longer needed. Remove this note might save some people unnecessary reboot time.
Handle firewall log widget display formats
the same way for the initial display and for updated rows done by Java Script. Now we receive the source IP and port, destination IP and port, all in separate fields so they can be put together in whatever combination for display....
Interfaces widget remove blank line if no IPv4 address
If the interface had an IPv6 address but no IPv4 address, there was a blank line where the IPv4 address would have been. There is no need for that, and one day IPv4 will be old legacy and systems will routinely have no IPv4 addresses at all - they will all be IPv6. Might as well make that look ordinary on the display now....
Interfaces widget create all div
All div for the various things need to be created here, so that later AJAX can switch the necessary things on/off and write a new IPv4 or IPv6 address into the div when an interface acquires an address.
Remove "link", "vlink" and "alink" from BODY tag
This is a positional change to remove "link", "vlink" and "alink" fromthe BODY tag, the following themes do not have Anchor tags defined inCSS, so they use the colours defined in the BODY tag, which is blue...
Put line break only if IPv4 address exists
This makes a line for the IPv4 address if it is there. If the IPv4 address goes away, the whole line will disappear, leaving just the IPv6 address without an empty line above it.
Set Interfaces widget IPv6 address
Now that get_interfacestatus() is returning us the IPv6 address, and interfaces.widget.php has a div to put it in, actually update the IPv6 address on the widget.
Lastsawtime has moved further along
srcport, dstport and version are now explicitly passed as fields here, so lastsawtime is 3 fields further out.
Display better message when booting and awaiting package reinstall
Send IPv4 and IPv6 address in get_interfacestatus
And make them strong (bold), which is how they are displayed originally by interfaces.widget.phpThis allows the AJAX that manipulates the div's in interfaces.widget.php to get the data, so it can make it update.
Standardise dynamic firewall log view
to be like Firewall Log widget:1) Display IPv6 address and port in [a:b::c]:123 format2) Fix same issue with rows gradually disappearing each update, or when in reverse order, update lines not being put in the right place....
Allow dot at end of FQDN for a host
Redmine #4124 has discussion of this.
Pass src dst IP port through to firewall log
and IP version. So that the receiving code can easily have each pat of the IP addresses and ports, and display them as it wishes.
Prevent resolvconf(8) from stomping all over our newly generatedresolv.conf and subsequent updates.
Add config upgrade code to validate changes made on c2fe67eb and d269747b. It fixes #4134
Add missing $ as spotted by Kill Bill, ticket #4132
Correct display of tunnel status on ikev1 with multiple phase2
Correct ipsec status page to make connect button work
Correct dashboard with new ipsec generation
Manually merge vpn.inc from master since cherry-picking is very messy to perform.
Correct issue with not reloading CP properly on calling interface configure.
Fix issue reported on https://forum.pfsense.org/index.php?topic=85737.0
Fix string, we want to print variable name here and not its value. Fixes #4132
Do not apply bw limits if the setting is not enabled in CP. Though still respect radius attributes for now with this setting. Resolves #4127
Use correct port for viewing portal page contents. Ticket #4125
Fix help for UPnP/NAT-PMP
Correct the leftsubnet specification for transport mode.
Ooops fix this identation on final config
Remove option that has now been merged into infra-host-ttl.
Remove unused function
Enforce some more checking to avoid https://forum.pfsense.org/index.php?topic=85580.0
include $myid in these PSK lines. Ticket #4126
Simplify logic using a proper function as spotted by Ermal
Replace ; by newlines when upgrading custom_options from unbound packages, it's related to ticket #4090
Do not restart unneeded services. Also triger configuration for the proper interface.
Add openvpn interfaces to group when they are created, it should fix #4110
Check if interface exist before try to add it to group
Bump latest_config version that I forgot on previous commit. Spotted by Jim Pingle
syslogd can't just be HUPed to pick up its new config, as many of thoseare command line arguments. Go back to 2.1x and prior behavior of TERM andrestart. Fixes source IP use with syslog among other config changes.
Add a cron item to expire items from webConfiguratorlockout, also add config upgrade code. This fixes #4122
Check if interface is disabled when configuring DHCP server. It fixes #4119
Disable dhcp server when interface is disabled. Ticket #4119
Do not check disabled interfaces, ticket #4119
Give the proper value for the logging level since even 0 is the correct value coming from GUI.
Encode space to avoid rejecting users with spaces in username
Use updated URLs for Limiters and Layer 7 help.
Remove some old comments and unnecessary cruft.
Pick up some more new pages for 2.2 that need help links.
Some misc updates to pkg help links
Add help for Unbound/DNS Resolver and its related tabs.
Point these CARP Help pages at more useful places.
Use provided function to change user's password
Fixup the rest of the URLs for DHCPv6/RA help.
The ID in DUID is Identifier.See also: ATM Machine, ISP Provider, DMZ Zone, LCD Display, GMT Time...
Update help links for DHCPv6 relay and DHCPv6 Lease Status
Remove old/invalid note
Fix up Help links for Inbound Load Balancing.
Make logic more visible as suggested by Ermal
Tidy up "widgets" XHTML
Add CDATA sections to scriptsAdd ALT to image tags and close image tagsDIV tag cannot be inside a STRONG tag, so swap them aroundSCRIPT cannot be part of TR tag, so place the SCRIPT inside a TD tag buthide it.
Cleanup aliases when temporarily disable CARP, fixes #4116
Teach interface_vip_bring_down() to deal with IP Alias over CARP
Follow help page that moved.
Add DNS Resolver to the list of services to be sync'd on HA, make sure it and DNS Forwarder are not enabled simultaneously. It fixes #4067
Fix password field name
Use newline to separate unbound custom options during config upgrade, it should fix #4104
Add a shortcut for unbound and enable it
Fix password field name to apply correct style
Add missing BR tags and fix display with pfsense_ng_fs theme. It fixes #4115
Where binding Unbound to *:53, set "interface-automatic: yes" so replies are sourced from the correct IP. Ideally this should always work this way, but setting this causes Unbound to bind to *:53, which shouldn't happen where specific interfaces are chosen. Ticket #4111
Validation of y/n answers in setlanip
At the moment the user can answer "yes" to most of the questions, but then later code only checks if the answer is "y". Thus you can type in "yes" in some places, have it accepted, but actually the negative action is taken. That is weird and will mess up people who try typing a whole string starting with "y"....
Update service providers xml to sync with upstream
rc.initial.setlanip fix validation of CIDR within range
Currently this allows the user to input any number for the CIDR. I happened to try 44 for an IPv4 CIDR when playing.This fixes that little bug - I think it is good to commit that first/separately so it can be identified apart from the other (y/n) checking/handling I am working on. Better to have separate commits for distinct bugs.
Regenerate Turkish mo
Update po from last pot