pfSense

Add BIND package

Allow - and _ in sysctl values. Ticket #6438

Don't override type so changing it is possible. Ticket #6439

Allow - in TFTP Server field. Ticket #6433

Link to correct schedule from firewall_rules.php. Ticket #6428

Use 0 here if specified. Ticket #6413

Send .real* directories first to final server

Add a new option --rsync-repos to build.sh

Fix this missed one.

(cherry picked from commit f42ef69ab518237260a2e129cbdf391549c003ad)

Welcome 2.3.1_1

Firewall / Aliases / Edit - New URL Table Alias Type

Make the code cleaner and easier to follow by using the same alias type designations as config.

(cherry picked from commit ebe833f6a9463b0e4add1d97c360af4a682d1add)

Firewall / Aliases / Edit - New URL Table Alias Type

Need to pass alias type to process_alias_urltable() function when creating a new url table alias because it is not yet set/available from config. So the alias_get_type() function can't be successfully used yet....

Fixed #6401

(cherry picked from commit fe68a6a2b28c897cb3a8f8fda452c25f649556f1)

Handle mode correctly with Auto IKE. Ticket #6360

Firewall / Rules / Edit - URL (IP) Alias

Make alias type URL (IP) available for selection in firewall rules.

Lower default LDAP timeout to 5 seconds. Idea from Sandeep1991 in PR 2971. Ticket #6367

Set request_terminate_timeout to the same as max_execution_time in case something executed externally doesn't respond, to avoid hanging up all of php-fpm eventually. Ticket #6318 among other similar potential issues.

Relax Suhosin to allow a 512M memory limit

Add -H to rsync calls to preserve hardlinks

Change default final rsync destination when it's a RELEASE

Set PHP's memory limit to 512M on 64 bit. Ticket #6364

Add nrpe to poudriere_bulk

Merge pull request #2976 from phil-davis/patch-2

Define default image type for snapshots later

Introduce a new option to build only core packages and skip images

BUILDACTION will never be snapshots

Introduce PRODUCT_REVISION variable to be used in core package version

Fix #6381 ipv6nat_ipaddr

Fix quoting in diag_routes.php, see ticket #6371

Better fix for escaping in ticket #6371

Fix up diag_smart e-mail handling, and the backend config code was broken/making false assumption about the config file as well. Fixes #6371

Add a parameter to skip final rsync

Move release branch to 2.3.1

Welcome 2.3.1-RELEASE

Do not send files to final place if hostname is empty

Revert "Do not enable i386 by default on amd64 host"

This reverts commit f5a9bb1f2180e6b9fcc9e81006524c2f6813e037.

Miscellaneous Textual Corrections - System / Advanced / Firewall & NAT

Section panel header title.

(cherry picked from commit 5414794c12fbcd6455a48f81428e0457a9cf0c95)

Make limiters info box work same as By Interface

The info box displayed on Firewall->Shaper, By Interface come down the bottom with and info icon and can be shown/hidden by the user.
The similar info box on Firewall->Shaper, Limiters sits in the main body with no info icon and cannot be shown/hidden, but can be dismissed....

Customize limiter info message

The $dn_default_shaper_msg is what is displayed on the Limiters tab. It needs to talk about "limiter" rather than "queue".
This code builds up each message using the same base template sentences, inserting "queue" or "limiter" in the appropriate place....

Miscellaneous Textual Corrections - System / Advanced / Networking

(cherry picked from commit 542d14be063e0a90b9182ee3dac9dc3fdb52d04d)

Miscellaneous Textual Corrections - System / User Manager / Settings

(cherry picked from commit 850211423b3486353b2419b02211213196d8c36e)

Miscellanous Textual Corrections - Add missing dots, normalize case

(cherry picked from commit cb6c20a997eeb77b3529e157cd512fabb4ff69f0)

Sanitize notice output here as well. Ticket #6154

Correct force updates when chosen. Ticket #6359

Fix script name in error log

Fix misspellings.

Disable ipcomp regardless of config setting to avoid problem. Ticket #6167

Silence mwexec output. Now that the groupdel actually works, it spams the log when group isn't found. Ticket #6352

Make rule_columns_with_alias end params optional

Stops PHP warnings like reported in forum https://forum.pfsense.org/index.php?topic=111768.0

Unbound and dnsmasq can both be enabled so restart both if need be

Fix scope for IPv6 link local gateway IPs. Ticket #6353

Handle link local IPv6 gateways and default gateway switching correctly. Ticket #6258

Miscellaneous Textual Corrections - System Advanced

Miscellaneous Textual Corrections - Services NTP PPS

Don't start unbound in track6 config if system is booting. Add dnsmasq here as well. Based on PR 2943. Ticket #6186

Use -g with groupdel when passing a GID. Ticket #6352

Do not enable i386 by default on amd64 host

(cherry picked from commit 44b30d595f41d69b0a4db7c032f57ca3e5d338c9)

Fixed #6349

Use proper IPsec enable test. Fixes #6351

Add alias display to target host and target port columns

(cherry picked from commit 474e70a2d178de50060c6e5f1114bb5b6963a6b6)

Add a safebelt to makesure $cpzone is always in lowercase. Ticket #6278

Fix #6278

$cpzone is always in lowercase, it's used as the array key used in
config.xml. Use it in two cases where the $cp['zone'] was being wrongly
used:

- To find out zoneid
- To replace PORTAL_ACTION url

Store notices safely to prevent potential XSS when notices are displayed locally or by remote systems where they're shipped. Ticket #6154

Fix package_reinstall_all post-upgrade when packages have been removed in pre_upgrade. Ticket #6137

Tweak upgrade - Remove unused code and document changes better

This will ensure a smooth upgrade for those running config 15.4 to any next version.

Prefer index.php over index.html where both exist.

Only execute remote search operation on first call of get_pkg_info(), this should fix #6177

Do not call pkg_update() here since pkg_switch_repo() aldready does it

Miscellanous Textual Corrections - Add missing dots to phrases

(cherry picked from commit e4c7d45fc7a294817325354e13f4d5bc4987739e)

Miscellaneous Textual Corrections - Services / Dynamic DNS

(cherry picked from commit 1c4e2ed053a04f7768a21129171a27e6804dbb0c)

Hide CIDR for alias types that do not use it

Suggested/discussed in forum
https://forum.pfsense.org/index.php?topic=111593.0

hideMask only modify input-group on first parent

Otherwise when unhiding (e.g. for Network type alias), input-group gets
added to every div up the DM hierarchy and the layout gets messed up.

Rename OSPF and System Patches packages in pre_upgrade_command. Ticket #6118

Revert "Add config upgrade code to update package names. Ticket #6118"

This reverts commit 291fad43870bdb39ef0ab32125b022e268a29cf7.

Check for is_array here to avoid possible issues if the config.cache is invalid. Adapted from PR 2925

Spaces->tabs

(cherry picked from commit e1caefc74fba6cbbb680288c1f8d930e4f0ad474)

Fix tab highlighting when editing mobile IPsec P1. Fixes #6341

Adding missing spaces between punctuation

(cherry picked from commit 0e63fe1f372584a03a6c84aeb6268fde8de75b3a)

Miscellaneous Textual Corrections - Services Load Balancer

(cherry picked from commit f3817766671915583074465aa725152c7a293568)

theme Compact-RED, added a few more tweaks to look a bit more aligned.

(cherry picked from commit ec18e589f123595c34cf8e1a84313394bb909250)

just exit for v6, gateways setup above.

fix booting check

Add Compact-RED theme and update system.php to sort available themes by pfSense, then BETA, then user supplied themes.

(cherry picked from commit 6a5c6661960e1cd39e3caf66a3caaeb2678d27b1)

Revert "Fix #6120"

This reverts commit 4cbe0b132f0d60b71a20052fae1155210a1f5a16.

Revert "Require system.inc to fix /etc/rc.console_setup. Ticket #6120"

This reverts commit 32f0ee884632aba5ab38485a7c25c190bb5bccce.

Require system.inc to fix /etc/rc.console_setup. Ticket #6120

A simple fix for #6120

- Retire system_console_configure()
- Replace above call on rc.bootup by setup_serial_port()

Miscellaneous Textual Corrections - Services DNS Resolver

(cherry picked from commit 0cb4d4a63585f500329616be6ee2bbb2274975c6)

Miscellaneous Textual Corrections - Services DNS Forwarder

(cherry picked from commit 3d7aaa1a3fac45271bfa50190496be6d70d7f296)

Fix #6120

- Do not include /etc/ttys on base package, it's not supposed to be
replaced during upgrade
- Create a script /etc/rc.console_setup to make it easy to call
setup_serial_port() from shell scripts. This script will update
/etc/ttys accordingly
- Call /etc/rc.console_setup just after 2nd stage of upgrade happened...

Update L7 config upgrade code removal. Only file notice if it was actually in use, otherwise it just confuses people.

Add config upgrade code to update package names. Ticket #6118

Setup gateway monitors and exit in rc.newwanip(v6) if system is booting. Ticket #6186

Log if rc.newwanip(v6) is called with empty interface.

status_queues.php, default packet_s to 0 if it falls through to that point. Ticket #6329

Experimentally fixed #6327

(cherry picked from commit 54fc9503ff550d04d1253c41c1fd49da1b64c07e)

Miscellaneous Textual Correction - Firewall / Shaper

(cherry picked from commit c3ebf3470402080bbddb709325611e7120eb3c0f)

Miscellaneous Textual Correction - Firewall / Rules

(cherry picked from commit 1fd8a5520602803108ef8bbb56b8ffd6493f2a00)

Fixed #6331

(cherry picked from commit 7e653b50c4a25b045121c026cd09ac4e567c0c42)

Workaound fixes #6320

(cherry picked from commit d1c57eb8e1699f36a3ccda53cef2e28b10eeca92)