pfSense

Use the new change to be less distuptive

Use change here to be cleaner and less disruptive.

Resolves #1703. Correct array key value.

Resolve issues that made php core dump or eat a lot of memory when big routing tables are present

Add a flag that defaults to on allowing the control of delete states from external callers such as pfCenter

Run on CD-ROM, too, it should be writable after rc.cdrom

Sync password database right after mount, in case it is corrupt. (Except on CD-ROM platform).

Adding hook for first tr

Fix copy and pasto

Load chosen but do not use it (for pkgs)

Move hook code up a bit

Adding hooks that will be used for filtering plugins

Move hook code up a few lines

Add hook for overriding interfaces

Adding chosen but do not actually use it beyond loading

Add hook for bottom icon row

Add hook and fix style for anti lockout

Add missing ;

Adding pre_id_tablerow hook

Revert "fix text"

This reverts commit c27ca36eb3fb3a5c5c1ca7feb9567bd6d23a16dc.

fix text

Adding apply hooks

make the tab character limit 92, leaves plenty of room and prevents some custom builds from unnecessarily turning tabs into a drop down

Bump to 1.7

Switch back to the default gateway configured when possible when gateway switching is active

Correct check for the gif mtu during an interface readdition to bridge.

Only apply remote_network setting for p2p modes, since it is not valid for remote access modes. Fixes #1707

Remove whitespace at the start of firewall_aliases.php - it was causing errors in the GUI.

Clear \r from these files to be readble

Ticket #749. Make the rules of the traffic shaper wizard select the wan side of the interfaces to not make the intra-lan traffic classifible in this way.

Revert wrong fix of Bug #1711.

Resolves #1703. Correctly delete a interface group members when the group is deleted.

Correctly restart the SSL lighty instance when running.

Correctly restart the SSL lighty instance when running.

Remove 'maxproc' since its unused in the code and correctly use maxprocperip to allow the GUI setting to be actually usable. Reported-by: http://forum.pfsense.org/index.php/topic,39155.0.html

Bug #1711. Acct-x-Octets are always 0 in Captive Portal -> Radius acct messages.

Fix redirurl collection so after login the user can be redirected correctly

Plug a security risk on CP where a user can login by submitting a special request

Correct the check for mtu 1500 to inlcude it. Also add the check on bridge_add_member function

Fix php behaviour on xmlrpc sync and vouchers starting with a number. Apparently php uses that to deduce the type of var and gets confused.

Bug#1688. DHCP server subnet input validation needs to check config.xml, not ifconfig.

Fix label for SMTP server. Hostnames work fine.

Adding dashboard hook

Adding hook to pre_table for aliases

Add alias edit hook

Add pre_input_errors hook to interfaces assign

Adding pre_input_errors hook

Revert "Move early call up a bit"

This reverts commit 50cd07ff1190cdd25293ecdd7e08e81161de33c5.

Move early call up a bit

Oops fix hook name

Adding hook for interfaces edit

Redirect errors to file

Make name similar

Adding hooks

Adding hook for interfaces allowing pfCenter and friends to add interfaces to the dropdown

Ticket #1552. Do not allow route-to to be set on block/reject rules for now. The issue is in the kernel but for 2.0 this protection is enough.

Ticket #1193. Do not show default queue checkbox when another queue has it selected.

Actually increase the default queue length for the new default queue

Respect the p2p catchall setting.

Add checks to prevent php warnings.

Re-enable downstream queues but with the difference that the default queue now tries to use all the link when possible and the bandwidth limit is specified on a subqueue instead of the interface.

Re-enable downstream queues but with the difference that the default queue now tries to use all the link when possible and the bandwidth limit is specified on a subqueue instead of the interface.

Revert "Ticket #749. Do not create the queues at LAN side for traffic_shaper_wizard_dedicated. Since we cannot control bandwidth its useless to try to handle it(ALTQ was built with this concept in mind)."

This reverts commit cd3346e205ad0f818977b7ccd0bd7259ed2f2e4e.

Re-enable downstream queues but with the difference that the default queue now tries to use all the link when possible and the bandwidth limit is specified on a subqueue instead of the interface.

Revert "Ticket #749. Do not create the queues at LAN side for traffic_shaper_wizard and traffic_shaper_wizard_multi_all. Since we cannot control bandwidth its useless to try to handle it(ALTQ was built with this concept in mind."

This reverts commit 4447358371f80814ea1c5e0f00c1a7301a2396f6.

Ticket #1052. Enforce certificates if they are present for authenticating to ldap. Allow to select a CA under ldap type authentication backend to be used for this.

fix correct name

Correct ts filename

Fixes #1618. Always convert the NAS_PORT value to int in php and pass the attribute type during encoding to guarantee that it is encoded as an integer.

Revert "Only load modules once"

This reverts commit e4f3307c8bd1673bb6fbf74eed6aababb88c83e2.

Only load modules once

Allow a ZMQ syslog address

CRL fixes for empty CRLs (so they don't kill OpenVPN)

Adding ioncube_loader

Fix botched patch, add closing bracket

Allow DHCP mappings to be resolved first for reverse lookups.

This was affecting a kerberos installation where the first DNS alias was
given for the PTR instead of the static DHCP mapping name, breaking the
kerberos tokens.

Create dynamodules in the order they where touche

Do a more strict check on this to avoid warnings

Enable the pfsync checking unconditionally

Put a netmask of /32 to all parameters of -k/-K/-b of pfctl to avoid any issues.

Actually give pfsync time to catch up.

If the sync has not finished do not start carp yet

Fixes #1666. For OpenVPN interfaces always check if part of bridge or not.

MFC: Do not check to see if gateway alls within a null value.

fix text

fix text

Ticket #1564. Give +x to the script so it can be executed. Simple hah :)

Bug #1639. Port alias missing input validation in firewall_rules_edit.php.

Bug #1641 fix. DHCP server default gateway needs input validation.

$g needs to be a global. Resolves #1654

Reconfigure wan/lan when finishing wizard, or the new IPs will not be applied.

Use RELENG_2_0 for updates and gitsync default.

Actually do pass an argument for second -b to avoid matching more tha supposed too.

Ticket #1646. Put netmasks of /32 to the parameters of pfctl -b to avoid that ocassions it matches more than it should.

Kill states from the previous ip the link had on all mpd consumers. Resolves #1629

Feature #1603. Correct nested urltable alias code to be more fullproof to errors and does not break the ruleset on large lists of urltables. Though this needs a revisit to work properly since it breaks urltable alias property of reloading contents.

Add function to return a certificate's common name.

Fix test for tun device, -f fails because it's a char device, not a regular file. -e works.

Fix use post here, since the other var isn't defined as it was before my commit yesterday.

Fix select detection code for the RADIUS NAS IP. Fixes #1648