pfSense

Mute kernel messages on dummynet and thermal hardware modules load. Fixes #12454

Allow to use /0 netmask on IGMP Proxy edit page. Fixes #7749

Traffic Shaper Wizard IPv6 support. Implements #4769

Use proxy for DDNS Check IP Services. Feature #12342

Ticket #12456: Retire Zabbix 5.2 packages

Dynamic DNS proxy option. Fixes #12342

Slack Notifications. Feature #12291

NAT 1:1 pseudo-interface input validation fix. Issue #12408

OpenVPN Generated RADIUS ACL Ruleset for status_output. Implements #12316

Modal window to see RADIUS ACL generated rules on the status_openvpn.php page. Implements #12321

IPsec PH2 BINAT subnet size input validation. Todo #12430

Do not check subnet overlapping on 6RD interfaces. Fixes #12371

Display default Reflection Timeout value. Feature #12318

1:1 NAT destination entries description fix. Issue #12410

DNS check optimization. Fixes #11512

IPv6 Port Forwarding Proxy+NAT input validation. Fixes #12319

fix #11734 NAT overlap validation does not check special networks

deleteVIP() IPsec PH1 input validation. Fixes #12356

Correct input validation on deleting a CARP VIP which is referenced by an IP Alias. Fixes #12362

Improve XMLRPC Sync for dhcpd. Fixes #10955

Reload syslogd on log Rotation Size / Retention Count change. Fixes #12366

Allow to halt OpenVPN client on status page. Issue #12416

Do not show Configuring IPsec VTI interfaces message at boot if no VTIs are configured. Fixes #12419.

Swap Captive Portal Redirection URL and Blocked MAC redirect URL input validation messages. Fixes #12388

Update help text for RAM disk settings. Fixes #12389

Remove unused function from pfsense-utils.inc. Todo #12406

6RD Prefix input validation. Fixes #12435

Default preferred lifetime input validation. Fixes #12439

Fix IPsec P2 Keep Alive mobile check. Issue #12398

Fixes redmine #12396

Bump up the config version to match a change in plus.

Keep 'enableserial_force' in /conf when a factory reset is performed.

Ticket: #6880

Some small cleanups with disk widget and library code.

Fix Disks widget UI on UFS systems

```
PHP 7.4.22 | 10 parallel jobs
............................................................ 60/279 (21 %)
............................................................ 120/279 (43 %)
............................................................ 180/279 (64 %)...

Fix PHP error on firewall_aliases_edit.php page. Issue #2668

Rename incorrect reorder function name in firewall_nat_out.php. Fixes #12377

Remove unused net/realtek-re-kmod from package repo

Move hwcrypto call to sysinfo widget

Do not restart IPsec on every gateway alarm. Fixes #12039

additional fix #7801 Include IPsec P2 address type in vpn_networks

Fix disk widget upgrade script assuming widgets always have an index

• Removes disk usage from system information widget
• Adds Pfsense\Services\Filesystem\ library
• Adds new disk widget

captiveportal: fix ipfw rules

When we authorise a client we add it to the *auth(up|down) tables.
This means traffic will pass and not be forwarded, as piped traffic does
not pass through the firewall again (if net.inet.ip.fw.one_pass is set).

However, these rules are 'layer2', so when the traffic is passed it's...

Initial commit of useful dependencies provided by Composer

Make ssh PermitRootLogin conditional. Fixes #12346

IPsec Widget none/disabled tunnels fixes. Issue #12337

Group copy fix. Issue #12226

Fix the diag_defaults.php PHP errors, include the required file.

Submitted by: SteveW
Ticket: #12340

Use minimized version of treegrid dependency

Adds missing treegrid dependency

Yandex PDD DDNS token fix. Issue #12331

Fix NG 6792: Fix errors copying previous kernel

pfSense-kernel package pre-deinstall script makes a copy of current
running kernel (/boot/kernel) to /boot/kernel.old so it can be used to
boot system in some corner cases. It was using `cp -r` what is
obsoleted and was throwing some errors when symlinks are used....

Add boot msgs for final IPsec steps. Issue #12328

Use correct var f/OpenVPN IPv6 ACL. Fixes #12333

Fix variable name when referencing an OpenVPN IPv6 tunnel network while
creating a DNS Resolver ACL entry.

While here, also add a safety check to ensure we never attempt to add an
ACL with an empty address.

Fix the option 4 in menu, factory reset.

Correctly resolve VTI remote addr. Fixes #12328

Use ipsec_get_phase1_dst() to resolve an IPsec P1 remote gateway
address rather than passing an FQDN directly to ifconfig

Adds the TreeGrid plugin for jQuery to the pfSense UI stack.(https://github.com/maxazan/jquery-treegrid)

Adds the TreeGrid plugin for jQuery to the pfSense UI stack.(https://github.com/maxazan/jquery-treegrid)

IPsec PH2 AH proposals order fix. Issue #12323

Do not disable hash algorithms checkboxes in AH mode. Fixes #12324

Ticket #12151: Pacify PHP lint using static string

OpenVPN exit notify & inactive incompatibilities

• Ignore exit notify in problematic cases. Fixes #12102
• Ignore inactive seconds in problematic cases. Fixes #12219
• Warn against using these options in problematic scenarios
• Hide from the GUI in obvious incompatible scenarios

Cleanup and improve easyrule. Fixes #12151

Restart OpenVPN instances on Host and URL type aliases change. Issue #2668

OpenVPN Aliases support. Implements #2668

Revert "Ticket #12235: pfSense-rc: Save pkg_set_version"

This reverts commit 340c9ab1d1eb1b959dc2292872866bca7e123665.

Ticket #12235: pfSense-rc: Save pkg_set_version

Instead of carry the old file pkg_set_version on pfSense-upgrade, which
is not rebuilt when we change product version, change file to be created
by post-install script of pfSense-rc.

To avoid issues, rename it to next_pkg_set_version

Consider GWG in ipsec_force_reload. Fixes #12315

Move help redirects to server. Implements #12314

Redirect mappings are already in place on the docs web server.

Rename a few missing Netgate devices.

Super Micro XG-1537 -> Super Micro 1537
Super Micro XG-1541 -> Super Micro 1541

Add null check. Fixes #9092

If the value is undefined in config.xml this will be null, not an empty
string.

Fix a typo in the Netgate 5100 name.

Rename the Netgate devices.

XG-15xx -> 15xx
SG-5100 -> Netgate-5100

Revert "Clean up some messy HTML in the cert/ca display code. Prep for future MVC changes."

This reverts commit 8d4fcd7ac1167894136e337fc619e63fa7200fa0.

Increase default RA intervals. Fixes #12280

Increase default RA intervals. Fixes #12280

This code path was not included in the original diff.

radvd: Avoid empty AdvDNSSLLifetime (Fixes #12173)

Make sure $raadvdnsslifetime is defined on second foreach

Log settings help text update. Implements #12012

• Improve notes about disk usage
• Add more calculations to estimate potential usage
• Improve notes about when to use/not use compression

Disable newsyslog compression w/ZFS. Issue #12011

ZFS compresses /var/log by default. If the ZFS dataset /var/log has
compression enabled on the first boot post install or factory reset,
then set a flag to disable newsyslog compression unless the user
overrides the setting in the configuration....

Update default config.xml empty tags. Fixes #12299

Reduces the difference between the stock config.xml and what is
written after initial changes are made to the config post-install.

Update default config.xml. Issue #12299

• Update configuration revision value
• Use new default password hash format

Add missing quotes

Replace - by _ on repository path

Followup e324755bee, combine sed and add g flag

poudriere upstream is not supporting dashes in ports tree names.

This is to prevent issues with sets, so we need to respect the change

https://github.com/freebsd/poudriere/issues/897

Don't wait on manual IPsec actions. Fixes #12298

Use a timeout with swanctl --initiate, and use --force for swanctl
--terminate. This will allow the commands to succeed and return without
waiting on the remote to respond. The negotiation continues in the...

IPv6 fix for setdefaultgateway(). Issue #12282

Change /var/run to tmpfs. Implements #12145

Update IPsec Filter Mode text. Implements #12289

VTI mode also works for transport mode (e.g. GRE), so note that as well.

Increase default IPv6 router advertisement (RA) intervals and lifetime. Fixes #12280

Convert RAM disks to tmpfs. Implements #12145

Allow to use nested URL alias in URL alias. Fixes #11863

Port Forward None and Pass associated filter rule copy. Fixes #12272

Do not allow to select PPPoE Server interfaces on the DHCPv6 Server page. Fixes #12277

Regex cleanup should also kill {}. Fixes #12257

It's not used often (and less in the GUI) and can be a source of
problems with large numbers of repetitions even outside of grouped
expressions.

Merge remote-tracking branch 'origin/fix/12279'

Use SHA512 to hash user password. Implements #10298

Original commit by Viktor Gurov

Fixes #12279

Ensure Unbound python script exists. Fixes #12274

Check to make sure a referenced python script exsits before attempting
to use it in the Unbound configuration. If the file does not exist,
Unbound will fail to start.

Fixed #12247 by adding curl_close() call