pfSense

Update the Copyright year.

A subsequent commit will deal with .po's.

Fix typo in state delete command

Improve handling of SMTP send errors. Fixes #11063

Fix diag_dump_states.inc filename. Fixes #11197

Merge pull request #4489 from lepurt/master

Merge pull request #4490 from dsmackie/issue-10827

Merge pull request #4492 from Augustin-FL/patch-1

Correct DPD syntax and values. Fixes #11196

IPsec P2 life_time changes. May help with issue #10176

• We currently only set life_time which isn't ideal
• Swanctl format wants rekey_time set, defaults to 1h (3600)
• Many users set P2 lifetime to 3600
• With rekey_time and life_time equal, rand_time is 0, so both always...

Load file on pressing 'Enter' key

Correct IPsec secrets section ID type handling. Fixes #11193

Revise JSON data format when generating a list of states

Moved diag_dump_states logic to an include file for clarity

Revise diag_arp.php moving control lgic to an include file

Use stronger cert defaults when creating a user cert. Fixes #11167

Avoid flooding the logs

Fix separators not updating - Issue #10827

- Fixed separator logic to allow adding/deleting separators when no rules are present
- Fixed incorrect dirty assignment

Fix separators not updating - Issue #10827

Domeneshop DynDNS correct return code check. Fixes #11146

Secondary DDNS server entry for static DHCP mappings. Issue #10224

Namecheap DDNS error code fix. Issue #5308

Allow wildcard DNS record of type A in DynDNS client for DNS provider Gandi. Ticket #11159.

Correct cert expire threshold default text

Update translation files

Regenerate pot

Add product_label global variable

Introduce product_label global variable, by default with same value of
product_name. The idea is to make it easier for rebranded products to
change the name on all visual texts while internal structures are
preserved.

While here, remove deprecated $g['platform'] and also replace places...

Remove unused variable

Remove use of deprecated $g['platform']

Remove (harmless) double / in file path

Fixed #11144 by verifying correct generation of userkey

Allow to select VXLAN interfaces for VLAN. Fixes #11143

Do not restart Unbound on OpenVPN client connection. Implemets #11129

Do not run rc.newwanip if received DHCP address has not changed. Fixes #11142

Hide VTI interfaces from Interface Group member list. Issue #11134

Pass correct parameter to create a new VXLAN interface.

Bridge prio/cost saving fix. Issue #11122

SLAAC on parent IPv4 interface fixes. Issue #9324

Voucher via URL fix. Feature #1984

DHCP6 VLAN with Track VLAN interfaces boot fix. Issue #3965

Use first interface with IP as fallback for NAS-IP-Address. Fixes #11109

Use idn_to_ascii() only for host type aliases. Fixes #11106

Ticket #9270: Make sure parameters are UTF-8

As described on ticket, for some reason we still don't know, when
pfSense_kill_states() is called with subnet as parameter (n.n.n.n/n) it
makes changes on $_POST content that can lead system to unpredictable
results....

Support %PRODUCT_NAME% on make.conf

IPsec PH2 proposals order fix. Issue #11078

Run dhcp6c enabled interfaces after track interfaces is UP. Fixes #3965

Run rc.newwanipv6 on dhcp6c REQUEST reason. Issue #9634

Respect %PRODUCT_NAME%

Remove drm-kmod

Do not bind unbound to disabled/nocarrier interfaces. Fixes #11087

Dynamic IPv6 DNS servers fix. Feature #10931

VXLAN restart on newwanip event. Bug #10960

Fix icon file name

Revise apple touch icons

Build updated Realtel driver for testing.

Exclude from ARM, it's x86 only.

Remove net/pimd, it's already built as a dependency

Update/sync DynDNS/RFC2136 status note. Fixes #3229

Hide poesX-Y from interface list. Issue #11034

Traffic Graphs widget options fix. Issue #11072

Ticket #6028: Fix path to rules.debug.old

Ticket #6028: Persist last valid set of rules

Save the last version of a valid set of rules under /cf/conf to make it
to persist on reboot. This allow it to be loaded when, for some reason,
current ruleset is invalid.

Add note about not using bogons on LANs. Issue #10866

Add symlink to accommodate apple-touch-icon-precompressed.png

Create poesX interfaces for PPPoE server. Issue #11034

DynDNS status icons. Implements #3229

No-IP DynDNS provider API update. Implements #6638

Status interfaces icon. Implements #11045

Gateways widget improvements. Implements #11057

Backup extra data fixes. Issue #11050

Catch up with the pfSense-module-0.69 which renamed the interface create function.

Remove old nss_ldap.conf if it exists before symlinking. Fixes #8698

Merge pull request #4326 from vktg/voucherviaurl

Fix #11053: Check variable before call implode()

Merge pull request #4486 from apollo13/patch-2

Allow to submit voucher via URL. Implements #1984

Fixed #11062 by adding support for fingerprint specification

Do not restart L2TP VPN server when deleting user. Fixes #11059

Unbound custom TLS port fix. Issue #11051

Dashboard widget interface name popup hint. Implements #11041

Add a warning when write_config() is called without description

Fix #204: Add messages to all write_config() calls

Remove commented out lines

Fix indent

Add a comment about CARP in generated rules

1. Snort package
   block log quick from <snort2c> to any tracker 1000000109 label "Block snort2c hosts"
   block log quick from any to <snort2c> tracker 1000000110 label "Block snort2c hosts"...

OpenVPN client fallback cipher variable changed. Fixes #10919

Retire some packages from pfSense 2.5.0:

OpenBGPd - replaced by FRR
Quagga_OSPF - replaced by FRR
routed - not actively maintained and rarely used
blinkled - Only work on deprecated hardware
gwled - Only work on deprecated hardware

OpenVPN compression settings improvements. Issue #11020

• Hide compression options when compression is not allowed
• Omit compression options from the OpenVPN configuration when
  compression is not allowed

Fix display of OpenVPN dev mode when empty/missing. Issue #10919

Improve OpenVPN Duplicate Connections option description. Fixes #10363

Change default config domain to home.arpa. Implements #10533

Fix display of OpenVPN data cipher when NCP is disabled. Issue #10919

OpenVPN Data Cipher changes. Fixes #10919

• Change handling of data ciphers so they work properly for TLS and
  shared key
• Move some duplicate code to a function
• Improve display of data ciphers in the OpenVPN server list
• Other misc improvements to OpenVPN server and client list to bring...

Merge pull request #4484 from emes/he-net-tunnelbroker-update-api

LDAP shell authentication. Implements #8698

interfaces_vlan_configure_mtu(): Style fixes

Set child interfaces MTU fix. Issue #11035

IKEv2 vtimap creation fix. Issue #9592

Auto add static routes for PPP interfaces. Fixes #10407

VXLAN bootup fix. Issue #10960

Fix a typo.

Obtained from: FE

OpenVPN data cipher negotiation updates. Fixes #10919

• Rename "NCP Algorithms" to "Data Encryption Algorithms" to reflect the change in OpenVPN (frontend and backend, e.g. "ncp-ciphers" changes to "data_ciphers")
• Change "Encryption Algorithm" to "Fallback Data Encryption Algorithm" and move it below "Data Encryption Algorithms"...