pfSense

Set Interfaces widget IPv6 address

Now that get_interfacestatus() is returning us the IPv6 address, and interfaces.widget.php has a div to put it in, actually update the IPv6 address on the widget.

Send IPv4 and IPv6 address in get_interfacestatus

And make them strong (bold), which is how they are displayed originally by interfaces.widget.php
This allows the AJAX that manipulates the div's in interfaces.widget.php to get the data, so it can make it update.

Interfaces widget create all div

All div for the various things need to be created here, so that later AJAX can switch the necessary things on/off and write a new IPv4 or IPv6 address into the div when an interface acquires an address.

Use correct port for viewing portal page contents. Ticket #4125

Fix help for UPnP/NAT-PMP

Correct the leftsubnet specification for transport mode.

Heh remove debugging code

Ooops fix this identation on final config

Just whitespace save from removing a useless else { branch

Remove unused function

Enforce some more checking to avoid https://forum.pfsense.org/index.php?topic=85580.0

include $myid in these PSK lines. Ticket #4126

Simplify logic using a proper function as spotted by Ermal

Replace ; by newlines when upgrading custom_options from unbound packages, it's related to ticket #4090

Do not restart unneeded services. Also triger configuration for the proper interface.

Merge pull request #1391 from ExolonDX/master

Add openvpn interfaces to group when they are created, it should fix #4110

Check if interface exist before try to add it to group

Bump latest_config version that I forgot on previous commit. Spotted by Jim Pingle

syslogd can't just be HUPed to pick up its new config, as many of those
are command line arguments. Go back to 2.1x and prior behavior of TERM and
restart. Fixes source IP use with syslog among other config changes.

Add a cron item to expire items from webConfiguratorlockout, also add config upgrade code. This fixes #4122

Check if interface is disabled when configuring DHCP server. It fixes #4119

Disable dhcp server when interface is disabled. Ticket #4119

Do not check disabled interfaces, ticket #4119

Give the proper value for the logging level since even 0 is the correct value coming from GUI.

Encode space to avoid rejecting users with spaces in username

Use updated URLs for Limiters and Layer 7 help.

Remove some old comments and unnecessary cruft.

Pick up some more new pages for 2.2 that need help links.

Some misc updates to pkg help links

Add help for Unbound/DNS Resolver and its related tabs.

Remove "link", "vlink" and "alink" from BODY tag

This is a positional change to remove "link", "vlink" and "alink" from
the BODY tag, the following themes do not have Anchor tags defined in
CSS, so they use the colours defined in the BODY tag, which is blue...

Point these CARP Help pages at more useful places.

Use provided function to change user's password

Fixup the rest of the URLs for DHCPv6/RA help.

The ID in DUID is Identifier.
See also: ATM Machine, ISP Provider, DMZ Zone, LCD Display, GMT Time...

Remove old/invalid note

Update help links for DHCPv6 relay and DHCPv6 Lease Status

Fix up Help links for Inbound Load Balancing.

Make logic more visible as suggested by Ermal

Merge pull request #1388 from ExolonDX/master

Cleanup aliases when temporarily disable CARP, fixes #4116

Teach interface_vip_bring_down() to deal with IP Alias over CARP

Follow help page that moved.

Follow help page that moved.

Add DNS Resolver to the list of services to be sync'd on HA, make sure it and DNS Forwarder are not enabled simultaneously. It fixes #4067

Fix password field name

Use newline to separate unbound custom options during config upgrade, it should fix #4104

Add a shortcut for unbound and enable it

Fix password field name to apply correct style

Add missing BR tags and fix display with pfsense_ng_fs theme. It fixes #4115

Tidy up "widgets" XHTML

Add CDATA sections to scripts
Add ALT to image tags and close image tags
DIV tag cannot be inside a STRONG tag, so swap them around
SCRIPT cannot be part of TR tag, so place the SCRIPT inside a TD tag but
hide it.

Where binding Unbound to *:53, set "interface-automatic: yes" so replies are sourced from the correct IP. Ideally this should always work this way, but setting this causes Unbound to bind to *:53, which shouldn't happen where specific interfaces are chosen. Ticket #4111

Merge pull request #1385 from phil-davis/patch-11

Validation of y/n answers in setlanip

At the moment the user can answer "yes" to most of the questions, but then later code only checks if the answer is "y". Thus you can type in "yes" in some places, have it accepted, but actually the negative action is taken. That is weird and will mess up people who try typing a whole string starting with "y"....

Update service providers xml to sync with upstream

Merge pull request #1383 from phil-davis/patch-10

rc.initial.setlanip fix validation of CIDR within range

Currently this allows the user to input any number for the CIDR. I happened to try 44 for an IPv4 CIDR when playing.
This fixes that little bug - I think it is good to commit that first/separately so it can be identified apart from the other (y/n) checking/handling I am working on. Better to have separate commits for distinct bugs.

Regenerate Turkish mo

Update po from last pot

Update Turkish translation file from last version available on old translation server

Regenerate pfSense.pot

Fix password confirmation name to make style working as expected. Fixes #3992

Merge pull request #1381 from phil-davis/patch-8

Base URL must be specified when alturlenable on

I had a 2.1.5 system that I was wondering why the dashboard always said it could not check for updates. I discovered it had "Use an unofficial server for firmware upgrades" checked, but the "Base URL" field was empty....

Split ICMP and ICMPv6 types on Firewall Rules

- Remove redundant declaration of $icmptypes and move it to a common
place (filter.inc)
- Add missing ICMP types for v4
- Add ICMPv6 types
- Adjust javascripts to show correct options depending of IP Protocol...

Fix indent and spaces

Fix #4099:

- When interface is 'lo0', strpos returns 0, that is erroneously
considered false (boolean) on the test. Be more strict on strpos return
to avoid skiping lo0 ip aliases during sync.

Fix #3790:

- Do not let 2 interfaces to setup the same track6 prefix id
- Show correct prefix id range for each interface

Merge pull request #1378 from phil-davis/patch-10

Merge pull request #1379 from phil-davis/patch-11

Improve check if no OpenVPN defined

Alternate version of https://github.com/pfsense/pfsense/pull/1376
This version retains the is_array() checks and then only does the count() if the is_array() is true.
Take whichever version you like.

Change text and color delimiter to carat sign

To match change made in functions.inc.php

Gateway Status Widget keep IP address bold

Forum: https://forum.pfsense.org/index.php?topic=85187.msg467438#msg467438

The bold is specified literally in gateways.widget.php for the gateway IP box, so we need to send it bold from here also when providing an update....

Setup ddb on all platforms. On full install it will save the dump, on NanoBSD it will print to console and auto-reboot.
This way, a router running NanoBSD won't sit at a db> prompt indefinitely if it crashes.

Merge pull request #1377 from phil-davis/patch-9

Fixup text rule should be route

This code was obviously taken from firewall rules and reused here without changing the word "rule" to "route".

Remove spurious '>', fixes #4091

Make sure this message is only displayed on console

get_failover_interface() is already called inside get_interface_ip(v6), no need to call it twice. It should fix #4089

Use exit instead of return here, otherwise script's return code is always 0 and user with wrong password is authenticated

Merge pull request #1371 from phil-davis/patch-6

Merge pull request #1370 from phil-davis/patch-5

Provide success return indication from console_configure_dhcpd

Recent commit https://github.com/pfsense/pfsense/commit/9ea554ee5cb25ea3bf5bb6bf7997c6c7379ce349 added testing of the return status of console_configure_dhcpd() - this let a user effectively abort from doing anything if they have answered "y" to prompt_for_enable_dhcp_server() and are being asked for the start and end of the range, and then decide they do not want to proceed....

Standardise css list padding

for the_wall theme

Standardise css list padding

for pfsense_ng_fs theme

Standardise css list padding

for pfsense theme

Standardise css list padding

for pfsense-dropdown theme

Standardise css list padding

for nervecenter theme

Standardise css list padding

for metallic theme

Standardise css list padding

for code-red theme

Standardise css list padding

for _corporate

Merge pull request #1368 from phil-davis/patch-3

Merge pull request #1369 from phil-davis/patch-4

Typo CIDR in UPnP GUI page

As reported by johnpoz https://forum.pfsense.org/index.php?topic=84964.0

Standardise css list padding

On Status->Services, the Services Status widget when a service status is down, the red "x" button does not line up with the green "running" button in the column.
This is because listbg has:
padding-right: 16px;
But the normal listr has:...

Disable RC4 ciphers in lighttpd

Call filter_configure_sync() is a better fix for #4066, as pointed by Ermal

Fix #4066:

Make sure pf is configured before other services are restarted when WAN
IP changes. The way it was before, 'pass out' rules with route-to still
have old IP set as 'from' and some Dynamic DNS ended up not being
updated.

Add RELENG_2_2 to gitsync