pfSense

fix vti localid hiding in WebGUI

(cherry picked from commit 16ed13478daeceb1ad6a2b180dba7506574d4480)

Another layer of help.php URL redirects. Issue #10135

Like an onion.

Also remove some non-existent pages.

Update help.php current post-redirect URLs. Issue #10135

URLs were still pointing at the retired docs server URLs, update to
current targets after redirecting.

Fix manual backup flag

(cherry picked from commit 0bdd1774a1666852e35452ea3f17bb9dc075ecec)

cosmetic

(cherry picked from commit f1c43228ab62ffae24dd6059049d2d03dbee10a8)

fix

(cherry picked from commit 2edf9abaacbecbc173262bccc8d797b9553096ca)

allow to disable APIPA blocking

(cherry picked from commit 09b6735d1c936ad7962d66af17a32f8a0bb9f9ed)

Fix #9285: Move ping-check option from global to per-subnet

(cherry picked from commit 5197e3e3a3b0ee048785e2ffb4222d7cba4e6c74)

use disablepingcheck as option name

(cherry picked from commit a0541b292d4cde76b9e95c1d8cbd99f5f26afee5)

add an option to the DHCP server to disable the ping check feature

(cherry picked from commit 7847e55fa2cd5813adb1ee4aa888b694957109b9)

Revert "Fix #9285: Move ping-check option from global to per-subnet"

This reverts commit 9133e01dc049920d716b045a86e78a9a05d98354.

Update copyright notice years. Issue #9245

Update copyright notice years. Issue #9245

Add Gandi LiveDNS DynDNS client.

(cherry picked from commit edfe22f8bae894eb678f3e7060cc91cea6f664da)

Add back inadvertently removed line

(cherry picked from commit 946238ef46e766e46392b7b9aed444cbc3a43909)

Fix syntax error in services_dyndns_edit.php, reformat statement.

(cherry picked from commit 1c11171b19ee8cabcbdaa5ffa433238033c510a2)

Keep "Show all configured leases" enabled after deleting DHCP leases.

(cherry picked from commit 59385e0413d77079c8acaf796868429475865603)

Fix tlsauth_keydir read on vpn_openvpn_server.php. Fixes #9030

(cherry picked from commit 20cb21ee5b71be43b16280b337bb24bcf5a1d17d)

Fix tlsauth_keydir save on vpn_openvpn_server.php. Fixes #9030

(cherry picked from commit 7dca65a19d08393cdb36f22fe98b847b46d9caf9)

Prevent OpenVPN tunnel network reuse. Fixes #3244

Ensures that a submitted tunnel network is not already in use on other
OpenVPN client or server instances, to avoid conflicts.

(cherry picked from commit 19a0636d7c0e0178209406480cc383853f0d3f72)

Add IPFW table contents to status.php

(cherry picked from commit 47f555e2e0718a188bc86d4dac801d32645d8a05)

Use full path for pkg-static

Fix GUI display of CARP capture contents. Issue #9867

(cherry picked from commit dd79aac6bfe13ee93177fcd0664115e7cfa25562)

Add exit notify to OpenVPN servers/clients. Implements #9078

(cherry picked from commit 7591a72a5108a2ac28d28745cec43ea282869aae)

DigitalOcean DynDNS description update. Close #9602

The description for DigitalOcean dynamic DNS is incorrect. The documentation currently states to "Enter @ as the hostname to indicate an empty field" but that produces errors since the DigitalOcean record ID is missing. Instead the user should look up their record ID and insert that record ID into the hostname field....

escapeshellarg()

(cherry picked from commit 6ad0603b9fc9a65a9bd10390976676ae48b3fbd0)

escapeshellarg()

(cherry picked from commit e43f0619b0f0937689ad78c023dfe077b1f84a10)

more readable

(cherry picked from commit c1c375e6fab9b334af8c290912324bf6aa42591b)

full cmd: route delete $fml $tgt $gw

(cherry picked from commit 3e20d17562406d1735720fe6b083e702cfc43de3)

Calculate poudriere PARALLEL_JOBS based on hw.ncpu

Revise jquery/jquery-ui in csrf_error page, which needs its own copy

(cherry picked from commit fb249aefa378172d6c246e62d15a8da40d80c5b6)

Correct jQuery include

(cherry picked from commit bb31e48e2c1eea6a7a3925f5398bce17c19f3af4)

Renamed jQuery-ui files for consistency with jQuery naming

(cherry picked from commit b1a3d89a0278ff16c270b86fca8621e5457c05fd)

Fixed #9407

(cherry picked from commit df4262d0e1d8d460ba93b9fcde16476306ee21f6)

Revert "Fix the build of miniupnpd in 12, disable CHECK_PORTINUSE."

This reverts commit e79fdf50be24375840011100440c9edee8c978dd.

Fix #9873: Use pkg-static

When pkg repo points to a new major version pkg is updated, use
pkg-static binary to check PHP version and make sure the command works

Fix 2.4.5 repo ports branch (take 2)

Fix 2.4.5 repo ports branch

Fix 2.5.0/2.4.5 repo configs

Don't dedup DNS from dyn sources if override is disabled. Fixes #9963

(cherry picked from commit f829d7e2967d170f09756937e9076e87d5f9e2d7)

traffic-graphs, don't stop drawing graphs when a interface is disabled

traffic-graphs, don't stop drawing graphs when a interface is disabled

(cherry picked from commit 176c7256bd1b13f401c554faae4a6ed55950682a)

simplify queue stats parser

(cherry picked from commit 5a0f6513bfe2ba1da87505dbb7b97c6b4479bf34)

support variable value length in queue stats parser

(cherry picked from commit e5deede539e4164256e5243b22f3ee963fc35ea7)

"don't" -> "doesn't" (typo fix for help text)

(cherry picked from commit 9d6adc62d78f7c0e6dcb6865edf5fb3ca60db1b0)

Search filter log by tracker ID. Implements #8703

(cherry picked from commit 6270bfe22ce283cca18855c5e79a1f4714505177)

Fix UPnP status when using an alternate interface address. Fixes #9961

(cherry picked from commit a8183b25c6bab388206f18acf679d96cd8b60f0e)

Add %REPO_BRANCH_PREFIX% to jail name

OpenVPN server cert default lifetime 825 days

(cherry picked from commit c576842887ac696dd5faf9d86d5447538d316069)

status_ipsec.php improvements

• Fixes Child SA button JS hide. Fixes #8847
• Adds Child SA count to JS button
• Fixes alignment of 'Connect' button for pending P1s
• Adds "Connect Children" button when P1 is up but P2s are not
• Adds space after comma in P1 source so that IPv4+IPv6 P1s do not break...

2.4.5 repo doesn't use ARCH_NEW

Add 2.4.5 repo and use it as default

Point to devel repo by default

Add packages to version string to support composite update

(cherry picked from commit 725c8134d390eefb4bb258893a27a278176158ac)

Fix is_set/isset

(cherry picked from commit cb442cfa7406e561761a52c826c9c58e7a4ee2bc)

Revert "Enable Multipath in FRR 7. Implements #9545"

This reverts commit 5fc75545d779e56468ec8c30e573c87f491a980a.

Revert "Restore newline at EOF"

This reverts commit bb51e33ba32e0e9b4b6925564c1183cc77923900.

Fix #6846: Properly detect Super Micro C2558/C2758

(cherry picked from commit 4de6f04d5f4eb69e9293dad6f47ce66f7d3baec1)

Add RFC 8031 Group 31 to IPsec. Implements #9531

(cherry picked from commit 4fc267484e604509b072b398642f19cb6797ef21)

Fix the build of miniupnpd in 12, disable CHECK_PORTINUSE.

(cherry picked from commit b761d75c2edc056576c669d36574793c5d13bdda)

Remove zabbix 3.2 and 3.4 options

(cherry picked from commit 1b5941ebe023ad5f72c93325cc427d2e7af5bd56)

Enable LDAP for sudo and build nss_ldap. Fixes #9399

(cherry picked from commit 7db5a396d398b010bfb70048881a6cec0577338f)

Set bind 9.12 options

(cherry picked from commit 342519c47e300cd355d8dbe023704ebba4235299)

Restore newline at EOF

(cherry picked from commit 840a0d4335182056f6eb0942d5661e83b400ac8b)

Enable Multipath in FRR 7. Implements #9545

(cherry picked from commit 1836b0c237efdf9bf2ce9fab798f2718f0fd6028)

Remove zabbix 2.2 leftovers

Remove zabbix 2.2, 3.2 and 3.4 packages

Fix drm port name

Revert "Build net/ng_etf-kmod"

Add it to 2.4.5 kernel

This reverts commit 82887eb03ff3d3c83a3cc6295ad73214284329d0.

Bump version to 2.4.5

Typo fix

(cherry picked from commit 463d5d11726084575b166dffe4b85164b2f5a5c3)

Switch default NTP pool server. Fixes #9931

2.<x> pools contain both IPv4 and IPv6 hosts.

(cherry picked from commit ae132b611439c15003578e38ec338a60eb9ed904)

Make hostname optional for for DNS-O-Matic.
This resolves ticket #7601.

(cherry picked from commit 1ccc327f0014d74de501a066df556add28c38e78)

Enforce limiter delay 0<=x<=10000. Fixes #9921

(cherry picked from commit 8afa74bb099d75962a5efb8a603981c0249f91a0)

Add OpenVPN Keepalive/Ping/Inactive input validation. Fixes #3473

(cherry picked from commit 4a5875a1771d286aee1c1e90d7f45991f9892a68)

CDATA escape more auth-related fields. Fixes #9327

(cherry picked from commit 327ad811aa5f965ba805ea78f879c759ca0fdafa)

Correct VTI IPv6 test and syntax. Fixes #9801

(cherry picked from commit 1d9fbb716543110ac245e2749f8c06fc77480a77)

Hide OpenVPN 'interface' when multihome is selected. Fixes #7840

(cherry picked from commit 5a9dc1dc278c6c537bfd5289125607117ceb99df)

OpenVPN page sorting tweaks

(cherry picked from commit 41025f6094ed34406cdf23097656ea7cae4483ae)

OpenVPN status page sent/recv bytes sorting changes. Fixes #7359

(cherry picked from commit f467ea24cb3c3a98b370c2427ff1aa53d25f14a1)

Add copy action to OpenVPN pages. Implements #5851

Added to Server, Client, and Client-Specific Override pages

(cherry picked from commit d86c28bc833cdeb8eb90525d930ff81fa3738cc9)

Change interface disconnect/release button to 'danger'. Fixes #9911

While here, add the interface name to the button text.

Net effect is a confirmation box to ensure the user wants to take that
action, which could be disruptive.

(cherry picked from commit cca21e50e2f97afe09709249975b3adf331fcf9f)

Fix #7791: strings binary can be useful for troubleshooting

Test DNS Hostnames separtely from GWs when storing new values. Fixes #9898

(cherry picked from commit 0d192133299b02efcb1db8f72bdce85a32a96631)

Fix #3743: Allow OpenVPN keepalive configuration

- Remove hardcoded 'keepalive 10 60' configuration
- Added 'inactive seconds' option
- Let user configure 'keepalive interval timeout'. It defaults to 10 60
as it was hardcoded until now
- Let user define ping and chose between ping-exit or ping-restart...

Show DNS server help when server list is empty

(cherry picked from commit 05025e63edf9f85b679de8f99d38d6600e8ad5e3)

Allow packet capture to match IPv4+IPv6 CARP. Fixes #9867

(cherry picked from commit b86891b1d5d62d30bc8f1bf3a7fdfee7030ed82b)

Add clientAuth EKU to Server type certificates. Fixes #9868

(cherry picked from commit 46869dd2b5ebf32e8297d65f98444fb38d314336)

Suppress errors from touch when marking GW down. Fixes #9851

(cherry picked from commit 83794361b7135aaef4e47b35bd27df7da6ce023c)

Use full path since this pkg prefix is /usr

(cherry picked from commit 14d49fba46389e3f90d26c6316044dfb52f98fc9)

Fix #9612: Run fsck -z once during upgrade

(cherry picked from commit 7373049764f144b2ea7c891bd60760ab64b41160)

Only redirects the user to the default page if no specific page page was set in the querystring

(cherry picked from commit 57b2f31714a77d86e51e09758e20da372c224826)

making sure my tabs align with upstream

(cherry picked from commit 7e114786e63619aaf803a5db33c55a92e2b34123)

adjust GEOM rebuild notifications to only notify the user when raid rebuild hits 25% increments

When a geom rebuild is occurring, this script by default notices that the device status has changed every time the rebuild hits a new percentage.
This results in a user getting 100 separate notifications (emails) every time a new percentage ticks....

Add search/filter to DHCP/DHCPv6 leases, ARP, and NDP. Implements #9791

(cherry picked from commit 9297ad6504618c5ffcee9f8fe02535cb33f570c9)

Removed escaping of CSS classes

(cherry picked from commit c8954c9f0957264a0287d3591b44fab5d52d0998)

Initialize JSON data to avoid warning.

Avoid warning/error for not initialized JSON variable.

(cherry picked from commit 6f2192d44689066e55cb7af6d19323edfc188b91)

Fix malformed JSON

Fix malformed JSON using json_encode().

(cherry picked from commit a9941bf65f82bd0a5491c693a55bc2163a43676d)

Fix OpenVPN keepalive default values. Fixes #3473

(cherry picked from commit 99d7e8c10e96e6f22ad47973d07258cd02426fe6)

Update privilege definitions

Reduce default GUI cert lifetime to 825 days. Issue #9825