pfSense

Revert "services_dhcp_relay.php: introduce proper shortcut section for dhcrelay"

This reverts commit 834bb946dd952f1d7a59e131d6b265cc82b7837d.

Revert "services_dhcp.php: cleanup warning notice when DHCP relay is enabled"

This reverts commit 564905382d696ef80b45e7552f4fdc502a7d2053.

Revert "services_dhcp.php: just hide relay-enabled interfaces"

This reverts commit 7a1d5e27022fb7183e8a7b17b5514169cbd7ecc7.

Revert "dhcp: support simultaneous v4 dhcpd and dhcrelay, Implements #14620"

This reverts commit e9577ebfd7852646a66697a3bde41b712687a4ca.

Add Next Hop info to status output

Allow legacy PKCS#12 export to function (for now). Fixes #14635

Refactor translation target for outbound NAT

Refactor display of special networks

Allow use of interface groups in firewall rule source/destination fields. Implement #14448

Refactor usage of special networks
Pre-requisite for easier implementation of interface group in firewall rules.

Use the correct index when saving rule separators. Fix #14619
Also fix displaying rule separators with an out of range index.

services_dhcp.php: just hide relay-enabled interfaces

Clarify IPsec Keep Alive description. Fix #12762

dhcp: support simultaneous v4 dhcpd and dhcrelay, Implements #14620

Disable frr 8 build options for the moment.

SNMP is broken, MULTIPATH may be unnecessary.

Set compile options for FRR 8

diag_edit.php Improvements. Fixes #7589

Fix the installation of the pfSense base package with pkg -r.

Fix Captive Portal view HTML link param. Fixes #14598

The way the code regex matches the parameter it needs the extra bit on
the end so it both matches the regex and gets the target parsed out.
Also this makes it consistent with the other links in the section.

Add dynamic DNS support for Porkbun DNS, closes #14402

Signed-off-by: Nita Vesa <nita.vesa@elektrik.link>

services_dhcp_relay.php: introduce proper shortcut section for dhcrelay

services_dhcp.php: cleanup warning notice when DHCP relay is enabled

Restore and continue to support dhcpleases6 until Kea migration is complete. Fixes #14502

dhcpd: re-add devfs to dhcpd chroot (BPF needs it)

dhcpd: remove unnecessary paths from dhcpd chroot

Unset DPCRE2/SPCRE2 options for haproxy-devel

Fix build failure:
====> You cannot select multiple options from the PCRE radio
=====> Only one of these must be defined: DPCRE2 SPCRE

Don't fetch contents of nonexistent URL aliases. Fix #14574

Validate all URL alias types when expanding URL aliases. Fix #13068

Correct JS for bulk rule copy convertif. Fixes #14576

ipsec: correct typo in var name when modifying p1s

/etc/inc/syslog.inc: Update accessor method formatting. Fixes #14563

ipsec: refactor config access

Move the options to Zabbix 6.4 after ece014b0

Fix static ARP interface check. Fixes #14374

Update util.inc

Add additional check to correctly display "Alias-on-CARP"-style Virtual IPs in Gateway Group VIP dropdown selection. Fixes #14524

Add page title to system_register.php. Fixes #14462

Use correct per-log settings path. Fixes #14545

Improve GIF/GRE interface handling. Fixes #14549

Encode dynamic log if filter. Fixes #14548

Multiple issues with PPP providers. Fixes #14547

• Update code for PHP 8.x
• Fix connection name handling (validation, parsing, etc)
• Fix output encoding of plan data

Tested with a variety of countries/providers/plans, output looks OK in
all cases I've checked.

Add option to invalidate GUI login on IP address change. Implements #14265

Bump to 2.8.0-DEVELOPMENT

Fix invalid log rotation setup test. Fixes #14517

composer update

Update to zabbix 6.4 after ports merge

firewall_rules.php: default to the first configured interface, Fixes #14345

firewall_nat_out_edit.php: fix invalid format string on Polish translation. Fixes #13946

Add "ixv" to the list of capable ALTQ interfaces.

Ticket: #14408

Correct ambiguous Unbound TTL Host Cache descr text. Fixes #14358

Read pkg plugins more carefully. Fixes #14474

Don't use LED functions without the expected LED count. Fixes #14482

Add the pfSense Plus pkg fingerprints.

Fixes the upgrade from CE now that CE can verify the Plus packages.

Submitted by: KrisM

Use the dynamic repos help text instead of the old 'custom' repo.

Remove the old 'pfupdate' endpoint support.

Disable the support for old style 'custom' repo.

The Plus migration will be handled by the dynamic repos now.

net/dhcpcd: (re)introduce dhcpcd to poudriere_bulk for development and testing

Use the new notation from 877e6b53c7e76f0bcb02621d290a4e325941fd1c.

No functional changes.

Add the missing 'pkg_repos_path' global.

Rerported and tested by: KrisM

Fix a merge problem in the last commit to accommodate a small difference with Plus.

Add the dynamic repos support.

Load the repository settings dynamically from Netgate, allowing for more
flexibility and direct support to update for the Plus repositories.

Don't modify routes when adding or removing DNS IP addresses that exist on interfaces. Fix #14288

Fix references to 'disable_carp' introduced in 62fb07c816. #2218

The original commit had some lingering references to a function 'disable_carp'
that had been abandoned in favor of a single 'enable_carp' function with enable
arg. This commit corrects these lingering references.

Revert "Add net/dhcpcd to poudriere_bulk"

This reverts commit 5c80b44d0aa294684f10c03f97b4b4793d4865dc.

Fix PHP error from invalid IPsec P1 config. Fixes #14458

Switch to PHP 8.x friendly functions to access multi-level array parts
since there is a chance they may be empty or partially defined in the
encryption algorithm section.

resolves issue #13940 by adding a default statement to handle any protocol layout

Correct the filter when validating URLs. Fix #14356

OpenVPN CSO: Improve form field JS. Fixes #13088

Originally-From: PhilZ-cwm6 @ GitHub

Convert AJAX GET calls to POST

Add net/dhcpcd to poudriere_bulk

CP fix check for used mac db content. Fixes #14446

Correct Outbound NAT 'other' type selector. Fixes #14354

Fix mac_procs incorrect references. Fixes #14425

Ignore ngeth and wg interfaces when performing interface mismatch detection. For #14410

Merge pull request #4641 from bmeeks8/suricata_build_OPTION_knob_update

Correct 6o4 addr variable name. Fixes #14415

Update Suricata binary build OPTION knob settings for NETMAP.

Correct alias bulk import regression. Fixes #14412

While here, ensure that a broken alias configuration does not cause PHP
errors which prevent users from using the GUI or console.

inc/upgrade_config: PHP 8.x issues. Fixes #14400

Fix ipsec_ikeid_next() copy/paste errors

The content of ipsec_ikeid_next() had some references to undefined variables
stemming from a change of nomenclature between 'ike', 'req', and 'key'. This
seems to stem from content in ipsec_ikeid_next() originating as a copy/paste...

dns/unbound: enable NOASLR port option

Add VLAN support validation for the Packet Capture interface. Fix #14376

net/keama: add Kea migration assistant to build for development and testing

Replace abbreviated links from System menu

Switch exclusively over to Python 3.11

Disable CARP until services have started and before shutdown/reboot. Fixes #2218

CARP has historically been enabled as part of interface bringup and sync setup
fairly early in rc.bootup. This change intentionally shuts down CARP from
interface bringup all the way until services have been started to ensure that a...

Relocate ConfigLibTest.php to new tests directory

To correctly handle running test in situ, add set_include_path() call to add
relative src/etc/inc path to the include path string

Work around PHP var ref scope weirdness. Fixes #14363

Ensure RSS widget number values are treated as int. Fixes #14365

Fix net/miniupnpd 2.3.3 build

Revert "Correct RAM disk swap calculation. Issue #13508"

This reverts commit b10998b1951b3e0d1cb74449a6b6dd333b9d292a.

Update make.conf to use correct miniupnpd port options for v2.3.3

Correct RAM disk swap calculation. Issue #13508

It was not factored into the shell version as it should be (still a
problem here, see Redmine).

It was also returning a bogus small value on systems that have no swap
configured.

Start building frr8 for development and testing. For #13575

Fix PHP 8.x issues in separator functions. Fixes #14338

Remove unnecessary utf8_encode'ing to pfSense_kill_states arguments. Partial #9270

Use first label, not last. Fixes #14336

Have rtsold always call the script, even if 'M' or 'O' bits are not set

Repsect NAT nosync for assoc rules. Fixes #14335

Update method of finding rule labels. Fixes #14336

The way rule labels are returned from pfSense_get_pf_rules() changed, so
this code needs to follow the new format.

Correct array_path_enabled syntax for nosync check. Fixes #14316

FW rule GW status popup improvements. Fixes #14327

• Fix status check to account for current gw status/substatus strings
• Include Tier for gateway groups
• Sort groups by tier and then name
• Fix interface name printout
• Optimize interface name and gw address display to avoid multiple...