pfSense

Do not generate duplicate NAT Reflection rules. Fixes #13012

write_rcfile() restart fix. Issue #13025

Use correct rx/tx index. Fixes #8861

CLI history option optimization. Fixes #12675

There is no longer a need to use the ~/.keephistory flag file. Scripts
can check the config.xml value for a user directly.

Fix syntax error

write_rcfile() restart support. Issue #13004

Improve unbound DNSSEC option check. Issue #12985

OpenVPN unbound restart fixes. Issue #12991

php: replace DEFAULT_VERSIONS from 74 to 7.4

Make openvpn.connect_async.sh executable

Add option to limit concurrent connections per OpenVPN user. Implements #12267

Clear stale Cisco-AVPair anchor rules. Fixes #12332

Improve OpenVPN client connection logging and logic
In preperation for fixes and features

Use OpenVPN deferred client-connect. Implements #12407

Move openvpn client-connect script to separate file
to prepare for deferred client-connect

Duplicate wireless interfaces fix. Issue #12999

Interfaces WIFI WPA configuration fields expose fix. Issue #12998

OpenVPN shared key warning. Implements #12981.

Adds a warning to the OpenVPN client and server list and edit pages
warning the user about shared key mode being deprecated by OpenVPN.

Warning only displays on the instance lists if there is an existing
shared key instance. Warning only displays when editing an instance...

Fix typo

Don't force a network type on page load for VTI mode P2. Fixes #11226

Also affects mode changes from/to VTI

Check Traffic Shaper Wizard Upstream SIP address family. Fixes #12937

Restart unbound to update ACL on OpenVPN change. Issue #12991

Convert IPv6 with IPv4 mapping to hex on prefix merge. Fixes #12440

Add t4_tom module. Feature #9091

Unset $filename variable. Fixes #12986

Do not sync root.key file if DNSSEC is not enabled. Issue #12985

Disable buttons on NAT pages if no rules selected. Fixes #12957

Skip unresolved OpenVPN alias DNS entries. Fixes #12984

Packet Capture: edit delete capure icon

Add upgradeconfig script. Implements #12973

Fix syntax errors. Issue #12940

Always change .ssh directory permission. Issue #12940

Merge pull request #4562 from NobleKangaroo/increase-max-firewall-log-entries

Merge pull request #4564 from PhilZ-cwm6/PhilZ-cwm6-patch-pckcapture

Edit Clear Capture button text

Unset the other PCRE options

Use unlink_if_exists()

Delete user home directory on user delete XMLRPC sync. Fixes #12940

Deprecate Zabbix 3.x and bring in Zabbix 6.x

Reload filter rules after reassigning an interface. Fixes #12949

Toggle Button for NAT Pages. Implements #12879

OpenVPN FQDN in alias netmask fix. Issue #12925

Typo in log widget object name.

Packet capture: add clear log button

When there is a log file, show a "Clear Log" button to delete the last log without having to drop to cli

Increase max firewall log entries

pf host ID support. Issue #12702

Add user opt to keep history. Implements #12675

Clarify ESP help text. Fixes #12953

Remember dyn GW when if is down. Issue #12931

• When a dynamic interface goes down, retain its old gateway address in
  a place we can read if if necessary
• When a dynamic interface comes up, remove the file with the old gw
• Add a function to fetch the old gateway...

Enable /etc/rc.d/zfsbe support in pfSense-rc

Add bhyve config package

Revert "Skip gateway if interface is down. Fixes #12920"

This breaks some gateway operations because the gateways disappear
entirely when the interface loses link.

This reverts commit c07c5cf5f2387cb2b9efdf25545bafebfa414f00.

Disable buttons on the firewall_rules.php page if no rules selected. Fixes #12871

New methods for killing states. Implements #12092

Add rule ID text input to state dump page. Issue #12616

OpenVPN FQDN in alias support. Fixes #12925

DHCPD: deny MAC Deny entries instead of ignore. Fixes #12923

Do not add HTTPClient entries if netboot is disabled. Issue #12892

Skip gateway if interface is down. Fixes #12920

Update HAProxy-stable to version 2.2. Implements #12898

OpenVPN status TAP mode double entries fix. Issue #12884

Restart gateways monitor on dynamic interface down. Fixes #12920

Status Interfaces SPF details fix. Feature #8861

Encrypt/Decrypt Robustness & Testing. Issue #12897

• Move cleanup to separate function.
• Be more aggressive with cleanup when performing multiple crypto
  attempts.
• Only fall back to old iterations or legacy when decrypting as
  there is no need to attempt these when encrypting new content....

OpenVPN status incorrect TAP mode RA server+empty tunnel. Fixes #12884

Encode pftop output. Fixes #12915

Define dnsmasq upstream DNS via --server option. Fixes #12902

Show SFP module details on status_interfaces.php. Implements #8861

Gateways edit page double content fix. Issue #12687

Fix infinite CPU loop on failed restore

When restoring a backup with wrong password or a user custom iterations count different than 10k or 500k, GUI timed out in an infinite CPU loop

Revert "captiveportal: fix ipfw rules"

This reverts commit 9dac41af43a5b977a604098688776987c4f76722.

DHCPD HTTPClient option for static mappings. Fixes #12896

Merge pull request #4551 from luckman212/dpinger_dont_add_static_routes

Merge pull request #4553 from luckman212/dashboard-hw-crypto-patch-1

adds option to not auto-create static routes for dpinger (squashed)

minor display change, redmine #12714 (updated & squashed)

DHCPD HTTPClient custom option. Fixes #12892

Increase OpenSSL iterations. Issue #12556

When encrypting and decrypting content such as config.xml backups,
increase the default number of iterations used by OpenSSL when deriving
the key material. Fall back to previous default and also retain the old
legacy behavior.

Rename Copy to Paste. Implements #8365

Reboot prompt on RAM disk size change. Fixes #12876

OpenVPN TAP mode tunnel network / bridge interface check. Fixes #12887

syslog: Update filters now that the rule format has changed

We no longer have '@1(0)' but '@1' at the start of rules. This used to
be where we kept the trackerid, but that's now supplanted by the
ridentifier, so the field isn't useful any more, and has been removed...

Remove default gateway if Mark Gateway is set. Fixes #12536

Attempt to clear the ZFS label off the end of the disk before expanding

This prevents hangs when importing the pool due to garbage on the end of
the disk

Rules copy feature. Implements #8365

Bridge interface input validation fix. Issue #12866

Do not remove net.link.ifqmaxlen from /boot/loader.conf.local. Fixes #12862

Correct Namecheap username handling. Fixes #12761

Add option for pw hash algo. Implements #12855

Namecheap DDNS response parse change. Fixes #12816

If the first attempt to parse the response fails, try again without the
XML declaration. The server may not be sending an accurate XML
declaration.

Fix dynamic IPv6 gateway address resolution. Issue #12847

Alias Export description support. Issue #12842

Fix PHP error on firewall_rules_edit.php. Issue #12392

Fix php syntax. Fixes #12831

LAGG hashing option. Implements #12819

Revert "Add telegraf back to the build on armv7"

Go builds, but telegraf fails with:

/usr/local/go/pkg/tool/freebsd_arm/link: mapping output file failed:
cannot allocate memory

This reverts commit af8d80fa0a7ee298afe2d42903cfeea4e08a86db.

Dynamic NPT support. Implements #4881

Add telegraf back to the build on armv7

Now that we are running the builds on newer FreeBSD this should work

Update OpenVPN widget to support client halt function. Fixes #12817

Multiple DHCP6 WAN connections. Fixes #6880