pfSense

Update interfaces.php

fix text - Capitalize sentence. s/this/This

Correct bandwidth assignment so the configuration is not reverted courtesy of ipfw(4) swapped arguments. Reported-by: http://forum.pfsense.org/index.php/topic,65069.0.html

Reload apinger now that we can rather than restarting. Related to Ticket #3119

fix text - s/occured/occurred/

the state type is required/valid for all specifications of protocol, not
just the ones formerly listed. For instance, sloppy is valid (and widely
used on 2.0.x and some older 2.1x) with "any" protocol.

Resolves #3121. Fix the command so it does perform correctly

Whitespace fixes

Set the interface as first here to properly be able to identify it after in php code. Ticket #2495

Manually revert the patch to cleanup aliases since now its propely handled in the ip assignements. Ticket #2495

Merge pull request #750 from phil-davis/RELENG_2_1

Reorder reverse lookup overrides so user-specified ones are effective 2.1

Reorder reverse lookup overrides so user-specified ones are effective 2.1

If the user specifies a domain override for 10.in-addr.arpa and also specifies "Do not forward private reverse lookups" then the user-specified entry is not effective. But the code was supposed to allow users to specify individual reverse lookup domain overrides that took precedence....

Revert "Remove unecessary variable"

Variable is used below

This reverts commit 010639a89ba4ebdd1267274e8c0dcfc6d474ce03.

Fix up filter_pflog_start - optimize some code, and fix $retval so that it will be restarted correctly after killing it.

Show friendly interface name, fixes #3095

tighten overly broad regexes for SMART monitoring

Show the name of the unresolvable alias name as well as the rule description to avoid ambiguity.

Catch adaX here too

Check if hostname is valid, it fixes #3117

Merge pull request #746 from razzfazz/dhcp-domain-releng-2-1

use correct domain names when registering static DHCP entries in DNS

use correct domain names when registering static DHCP entries in DNS

When registering static DHCP entries in DNS, we first try to use the domain name configured for the static entry (if any), then the domain name configured in the DHCP server settings for the corresponding interface (if any), and as a last resort the system domain name....

Use full path

Show full process arguments in system activity output, but limit output to 105 chars wide so it does not spill out of its background area.

Make NAT port forward data entry error message match GUI text

The GUI has "Redirect target IP" and "Redirect target port". But the error message when validating "Redirect target port" refers to it as "local port". I was just confused when I forgot to type in the "Redirect target port", the error told me I had to enter a valid local port. I looked down the GUI page for "local port" and it is not there.

Bumpitty bump bump

Update pt_BR translation files

Update translation template

Fix test

Fix exec bits.

Fix #3113, fix multiple english spell errors s/seperet/separat/

Merge pull request #738 from N0YB/patch-3

Update services_dyndns_edit.php

Update services_dyndns_edit.php

Setting $pconfig['ttl'] to isset result causes the ttl value to be set to 1 (true) upon subsequent saves.

fix typos

Also catch adaX Fixes #3112

revert part of commit 4cfcbd3 - removes blank option on firewall log widget drop down menu

Optimization has nothing to do with limits

Mark input_errors as reference at do_input_validation declaration, it fixes #3108

Fix #3106, parse 'not' rules right on destination for port forward + reflection proxy rules

Fix #3103, cleanup ports fields when protocol changes

Close td

Allow advanced options state-related parameters to be used for TCP, UDP and ICMP

Allows the state-related parameters to be specified for UDP and ICMP as well as TCP. Discussed in forum http://forum.pfsense.org/index.php/topic,64653.0.html

Allow advanced options state-related parameters to be used for TCP, UDP and ICMP

Allows the state-related parameters to be specified for UDP and ICMP as well as TCP. Discussed in forum http://forum.pfsense.org/index.php/topic,64653.0.html

Merge pull request #726 from N0YB/patch-2

Update rrd.inc

Update rrd.inc

Fix this error
php: rc.bootup: The command '/usr/bin/nice -n20 /usr/local/bin/rrdtool update /var/db/rrd/system-mbuf.rrd N:U:U:U:U:U' returned exit code '1', the output was 'ERROR: expected 4 data source readings (got 5) from N:U:U:U:U:U'

Implement an option to allow using the IPv4 connectivity interface for sending the dhcpv6 information. Usually useful for ppp[oe] type links and some ISP

Merge pull request #723 from phil-davis/RELENG_2_1

Fix error in 2.1 branch dhcp6prefixonly implementation

Fix error in 2.1 branch dhcp6prefixonly implementation

The Main branch code was in the correct place, but the version applied to 2.1 branch had this code in the wrong place.

Fixes #3100. Fix spell and spaces issues

Merge pull request #721 from phil-davis/RELENG_2_1

Validate firewall rule advanced options requirements (2.1 branch)

Validate firewall rule advanced options requirements

Checks that the user has selected a TCP Pass rule etc when using the state-related advanced options. Validates as per the checks that are applied in filter.inc when generating the actual pf rules.
Forum discussion: http://forum.pfsense.org/index.php/topic,64653.15.html...

Merge pull request #719 from phil-davis/RELENG_2_1

When adding Port or URL alias default the alias type (2.1 version)

Add missing backup of gettytab

When adding Port or URL alias default the alias type (2.1 version)

When viewing the Port or URL aliases tab, and pressing "+" (add), make the default alias type match the Port or URL tab from which the user pressed "+".
This is a version for the 2.1 branch.

Fix editing saving dhcp6prefixonly state

Reported in redmine #3097 and forum http://forum.pfsense.org/index.php/topic,64483.msg350255.html#msg350255

Merge pull request #715 from N0YB/RRD_RRA_Sized_for_Previous_Period

3652 days worth is a too much. Scale it back to more reasonable 1.25 x maximum used data (2284 days).

3652 days worth is a too much. Scale it back to more reasonable 1.25 x maximum used data (2284 days).

Handle IPv6 in ip_in_interface_alias_subnet()

Minimize inclusion of bogonsv6

If "Allow IPv6" is on, but actually there is no enabled interface with "Block bogon networks" enabled, then we also do not need to include the bogonsv6 table into pf.
This allows some more flexibility for users to leave "Allow IPv6" checked, but still not use up memory for bogonsv6.

Use default RRD colors that are a little more visually distinct. Add some better comments/labels to make it easier for people to help customize and tweak the colors. Suggestions welcome.

Disable the BEAST protection by default because the GUI will break if you use this and have a Hifn card installed. Others may break similarly. Change it into a checkbox option, off by default, and automatically disable it if a conflicting card has been detected.

Sync p0f database for OS detection w/current file from FreeBSD

This is not a percentage

Remove remaining hardcoded theme names

Don't blow up the config if someone enters int'l chars in an LDAP attribute/DN field. Ticket #2227

Add LDAP server options to control UTF8-encoding of parameters. Fixes #2227. While I'm here, add a checkbox to prevent the stripping of @ from the LDAP username if the user wants the full name transmitted.

Some more tweaks to state and mbuf update/output on dashboard widget.

Use some easier to distinguish colors for mbuf graph

Add a meter for states, too

Fixup mbuf stats function

Call interface_ipalias_cleanup() after $interface is initialized, and get current IP after it

Make mbufs update via ajax

Fix ids

Fix an occasional "blank" cpu freq printing that shouldn't happen.

Make mbuf usage a meter, too.

Show totals for memory, swap, and disk usage.

Add an RRD graph for MBUFs under system. Tweaks welcome.

If an account has SSH keys, show them, don't show the checkbox to add keys. Fixes #2729

Don't generate reflection rules if reflection is disabled for that rule.

Do not break ppp type interfaces on v6

For ppp interfaces the real interface is not present anymore in the xml config section of the interface. Due to this do some more work on extracting the real interface when ipv4 is pppoe/ppp/... and ipv6 configuration files will use the wrong interface to request information from provider. Reported-by: http://forum.pfsense.org/index.php/topic,64483.0.html

Enable filtering on ipfw sysctl not dependent on ipfw module otherwise issue reported here http://forum.pfsense.org/index.php/topic,64412.0.html happens

Ignore errors/warnings from these calls

Merge pull request #683 from dhatz/RELENG_2_1

support mitigating BEAST attack, see http://forum.pfsense.org/index.php/topic,63001.0.html

services_dhcrelay6_configure developerspew debug text fix

Start DHCrelay6 on boot

Correctly decide if dhcrelay is enabled

Teach service start stop restart about dhcrelay6

Consistent dhcrelay6 pid file location

Fix #3091, fix bad var assignment

Substitute Product name in privileges

Merge pull request #709 from razzfazz/RELENG_2_1

properly handle custom-v6 dyndns entries in web interface

properly handle custom-v6 dyndns entries in web interface

Move variable declaration to the top, declare it global before defining. Fixes #3090

Remove irrelevant comment.

Fix copy/pasto introduced in previous commit.

Merge pull request #707 from razzfazz/RELENG_2_1

Merge to RELENG_2_1: Support for protocol 41 in rules, support for HE.net AAAA record updates, and support for custom DynDNS URLs with IPv6.

Add support for custom IPv6 DDNS.

Change separator as per JimP's request.

Add front-end support for dyndns AAAA updates

Clean up HE.net AAAA backend support.

Add backend support for HE.net AAAA record updates.

Defines a new DynDNS provider 'he-net-v6' for updating AAAA entries on
dns.he.net.