pfSense

Fix typo in error msg

(cherry picked from commit c921665902c0a0bccd2376437a1ab1118009f86f)

Default ACB schedule to every day at midnight

(cherry picked from commit ebbc9e97a62464650684033df7f9cd7c3d32e609)

Fixes #8949 Looks like there was 2 variable names for the same variable shownetboot and netboot. It now just uses the variable name netboot

(cherry picked from commit e46ea2c60986c62371966025ab3068466217fefa)

Added scheduled config backup
Fixed: #8947

(cherry picked from commit a1aa91dec887ba929be08c993170803396a669b2)

Add filer pkg, which was merged a while back but not set to build.

(cherry picked from commit 6b15f2c16b2a5396855751edf2983bcc2d12520e)

Fix Limiter validation check, which allows old queues to display. Fixes #8956

The AQM defaults to droptail when empty, but empty was being rejected as
invalid even though it was handled in the code.

(cherry picked from commit cd3cde526a9215e914c2f420c7e9c74b059a2ad0)

Solve a package reinstall/start race condition. Fixes #9045

(cherry picked from commit 84963037949aaf5225ae664cfe9b4e3b037beee0)

Show nvme controllers in SMART list. Fixes #9042

(cherry picked from commit e738a4c9b2607ad3561a0fce89d903535ca71249)

Revert "Show nvme devices in SMART disk list. Fixes #9042"

This reverts commit bdb6021f79f222b2c7d732436800e96cb34ea973.

(cherry picked from commit dba7debb2e6be1ef469d99fa5e9673fba3f7d6db)

Show nvme devices in SMART disk list. Fixes #9042

(cherry picked from commit 89b4d4f30576908e36d5c6b70701db2f5e7363e6)

Enable Zabbix 4 packages build

Fixes to ssh agent forwarding setting

(cherry picked from commit 8cc841364132b4fcf24bb314e8f746b01619d54d)

ssh settings upgrade fixes

(cherry picked from commit 72b7b9a20e43e644035e44bd28b13f4e4bd775a5)

Restore the RADIUS NAS ID option to Captive Portal. Fixes #8998

Keeps the default of using CaptivePortal-<zonename> when not set,
otherwise uses the value supplied by the user as with older versions.

(cherry picked from commit b1cc8f3143f7253bb3acdcdf8c18f9effaf3bce5)

Include zone name in Nas-Identifier

(cherry picked from commit df99d3bf44dc0a254be305a25b8459f4cc5fe9a9)

Only display "you are connected" if :
- Logout popup is disabled and no custom logout page is set
- Logout popup is enabled and logout_id is missing

(cherry picked from commit c857583bb95d6d787b3334e5775cfd7921d547fb)

Review fix.

(cherry picked from commit 8b6aae09e9f4607fc27066dff7a8f58c568f61f9)

Review fixes.

(cherry picked from commit 0aa2f5f07ba64c3122b5f01656de3e7b0a673492)

Enable setting AllowAgentForwarding value

Fixes #8590

Signed-off-by: Sorin Sbarnea <ssbarnea@redhat.com>
(cherry picked from commit 1d835d945349d3c7b65c88155948e607bcbfdf76)

Add Zabbix4 config options

(cherry picked from commit 75444abd277a4a2afad3b5c52156a2c14153c508)

Enable missing options for haproxy17

Add help.php entry for AWS VPC wizard.

(cherry picked from commit 0123cb3202c19fd8ad288545720e3b5e6e56a0f6)

Wording changes for PTI disable option. Fixes #9026

(cherry picked from commit 2ba7026de2c08450fa40d5694f44cbe46a2262e2)

Init schedules before use. Fixes #9009

(cherry picked from commit 4c3669ea8a9acf4657cd84e0ae22fb8809302756)

Clean up test for CDATA tags and add common_name. Fixes #9006

(cherry picked from commit 7a97d81d81afa7ea86c8ad79bff8e203bc9457a4)

Unify and improve crash report checking. Fixes #8915

(cherry picked from commit 6e150fc0d022d231c7dc243ba68f4784f58973d5)

Avoid creating or parsing a second empty rrddata tag. Fixes #8994

(cherry picked from commit 9386784480f27d6b04ebf013f691522130a7f013)

Fix erroneous hostname error for Custom IPv6. Fixes #8977

(cherry picked from commit 45ff6b8f1d574b3786d25286abc4978427675974)

Change the method used by status.php to mask sensitive info.

Also add a few new tags to be masked. See Factory #1170

(cherry picked from commit 9858a361b81daa9465e61a93c205bfd9811e9f3a)

Supersede the DHCP MTU when advanced options are present. Issue #8507

(cherry picked from commit 5a7035523e9f70fa568d688915bf4aed2f0aac41)

Detect if ccache is installed and make poudriere to use it

Prevent a reference error w/o rules in the config. Fixes #8993

(cherry picked from commit 67807c9536ae1810a067155049c96e8d2b634777)

Issue #8974

(cherry picked from commit 32a7f1612b79ad04cc252d0a5e217c857b00024d)

ssh settings alignment. Fixes #8974

Remove redundant settings stored in the wrong place
Store all ssh settings in the same place
Initialize this array before use

(cherry picked from commit ec439957ce0f70778d89f57eba9553e2afba874a)

gettext on strings

(cherry picked from commit 988b786d0bc8753a7427aaa693effd6018658770)

don't show drag message if roworderdragging is disabled

(cherry picked from commit fd4dc22e73a43c644e8972923c98abb86a27889c)

Fix typo

(cherry picked from commit f31ef5aa0e777c236fb175778e63b9e26a9d2627)

Init dnsmasq arrays before referencing. Fixes #8967

(cherry picked from commit 651b4dcb4ed2dc1404cd532a2a53190e77cbcbc4)

default to the lan interface on WOL page, unless another if is
submitted in the form data.

(cherry picked from commit c818076d474c45d5da283d20baab6f8a0d67a540)

Removed duplicate line :/

(cherry picked from commit 2e49073226a9795667c79c9f09f0111895b4f2be)

Properly restrict a network when default is open.

Effectively override any default setting.

(cherry picked from commit c2d8c3c8e3e21540f093f69d2ccba6020bc413d0)

Removed is_ipaddr() as ip_in_subnet() does it already.

(cherry picked from commit e0f12d6bfd604c79ac9bf8f7dce5daa68b8c0d1a)

Fixed NTP status page not honouring NTP ACLs

Reported in redmine https://redmine.pfsense.org/issues/7609

(cherry picked from commit d73918f2a241f5b072a8b9fd2e29b82ad0a16ec1)

enable ip send for FreeDNS DynDNS update

without this, only legacy IP records get updated correctly.

redmi ticket: https://redmine.pfsense.org/issues/8924

(cherry picked from commit 44857365cd397a468fadd79dea75a375f289f32b)

garga changes
move conditional before platform_booting
and join w && instead of indenting

(cherry picked from commit b974f79a368b253272b2cf9fc7448f4fb91b12ff)

reduce the tons of log spew that currently spit out during boot
and gateway failure events. Try to make the logs readable again,
while still allowing verbose logging if needed via a new hidden
config option:

['system']['gw-debug']

(cherry picked from commit f406f896444ec0c5d8fba00fa94cde0f1139b69c)

Use poudriere_bulk.$TARGET_ARCH instead of poudriere_bulk.$TARGET.$TARGET_ARCH for the arch bulk list.

(cherry picked from commit bd936941a3cb5e381c4bba8f9245a748cf93206d)

Allow the use of poudriere_bulk.${ARCH} to list additional packages for a specific architecture.

(cherry picked from commit deb5f1dacf9579052dd275c93035adbf4ae1814e)

Fix JSON encoding of gw/gwg params for firewall rule gw list. Fixes #8962

(cherry picked from commit 157aff9e256aa235ba68ccc2168c61fc61e90072)

Fix a display bug in status_gateways.php
This bug causes the Monitor IP to appear even when a gateway
is unmonitored. The monitor IP from the last gateway in the list
to have one will simply get repeated. This patch fixes that bug,
and also cleans up a few other things- unused variables, gets...

Underscores never hurt nobody
Also, i18n

(cherry picked from commit 42c059894a4a521415c35dc048952658f61fad65)

It's 2.4.4-RELEASE time

Remove 2.3.x and 2.4.4-RC repos, make 2.4.4 the new stable RELEASE

Add missing regex to validate serial

Use all possible kenv variables to detect serial

Fix redirect back to user mgmt when editing user 0. Fixes #8920

(cherry picked from commit e2f60597df488cf073d14913d8a523cbb447f733)

Initialize DHCP settings before use. Fixes #8919

(cherry picked from commit 124ca365049368460598621f962ad0b4f5459d7a)

Fix #8910: Restore older versions behaviour and consider 'wan' interface as primary default gateway

Don't allow deletion when spoofing another userkey

(cherry picked from commit 3fd4f32c344573addea1dbb44dddef63b0e793e3)

Fixed #8901

(cherry picked from commit d33560e8dcba496a553f33c50113877778c3274b)

Fix dashboard update check & gitsync settings. Fixes #8913

(cherry picked from commit 26e1525c153a672457a92d65f9c05d45b43a204d)

Fix #8911: Keep configured pkg repository when restoring config

small change to fixup https://redmine.pfsense.org/issues/8851
without this, clicking edit on existing CA goes to wrong screen
and breaks Save button

(cherry picked from commit 3319f34dfdec8e09c7b561a0689610c9a4ca3ee2)

Init syslog settings before using the array. Fixes #8905

(cherry picked from commit 508c66ace779a6021b217d055b53587fdb021fec)

Revise async_crypto setting

Fixed #8880

Fix an obvious mistake.

Reported by: stevew
Ticket: #8906
Pointy-hat to: loos

(cherry picked from commit 0285d8e5c721491c7e8ae8dea0f0fdef95bb5cff)

Always pass the $local variabled to load_loader_conf(), it makes the code easier to read.

(cherry picked from commit 1ef4cbdbb03791f5c3541df44da5a61d00db6e46)

Sync the know variables with factory.

(cherry picked from commit fe7523cbbdee119bf71abb93009f44a9f8e47963)

Filter properly the know variables in loader.conf.

The know variables should be used as prefix not as literals.

(cherry picked from commit 21bacf010021d34012f6869ce1d55268fad7b0ec)

Fix #8895: Increase FD_SETSIZE to 3172 on lang/php72

Initialize DHCP settings in setup wizard. Fixes #8889

Rather than assume they are present, create the arrays before use.

(cherry picked from commit 7c15c19d76eac725c42133012488cb97e4dcd885)

Fix a PHP erorr when a CRL has no certificates

(cherry picked from commit d9064f0b92452daeaf0cb7f0a0e74561f246ed5b)

Fix typo

(cherry picked from commit 3b55fc639cdea2be20d55113055fd511ba193866)

Update translation files

Regenerate pot

Revert "Default VTI remote to Address but allow it to change. Fixes #8859"

This reverts commit da54e84ae79328a87b4a319239bb1b14d7ed2ce6.

Prevent a user from selecting VTI for mobile IPsec. Fixes #8877

(cherry picked from commit 885cf6a751f076f43fa89167ba2a79f779244f1b)

Changes on the parent interfaces will create new interfaces and the existing VLANs needs to be redone.

Ticket #8527

(cherry picked from commit 6fd6b8536b80316caf0f3b9221ed6af0b3453571)

IPsec VTI requires a manually specified network/address. Issue #8877

Prevent a user from selecting an interface macro like "LAN Network"
which cannot be used with VTI since it does not work like traditional
IPsec Phase 2 definitions.

(cherry picked from commit 02af14942872567362f1761f06a1d754080da074)

Fix a PHP error when upgrading gateways

(cherry picked from commit bd670efef4c642ebb03b844ef0c38258740a37a1)

Init gateway group array before use. Fixes #8876

(cherry picked from commit b54a1af45c5add4e57253bfa0b562dadf3ae10f7)

Fix default repo

Use proper variables on pkg repos

Rename 2.4.4-RC repo to pfSense-repo-244

Fix branches

Welcome pfSense 2.4.4-RC

Fix #8863: Add missing kernel module amdsmn, required by amdtemp

Fix #8806: Configure captive portal on secondary identical as master HA node

Fix #8721: Call proper filter_configure function from this class

Revert "Attempt to re-enable Telegraf for armv6"

This reverts commit 46043cbc5a1dd205bcbe53cc31341d27ac06276e.

Attempt to re-enable Telegraf for armv6

Change status.php to use "ifconfig -v". Implements #8860

Default VTI remote to Address but allow it to change. Fixes #8859

Make async_crypto explicit enabled/disabled rather than current isset

Move IPsec VTI interface cleanup list. Fixes #8858

Generate the cleanup list before the P1 loop but after the initial
interface configuration.

Use safe_mkdir() for IPsec dirs. Fixes #8856

Simplifies the process of making IPsec dirs, though it may not correct
the original reported issue since that appears to be a disk problem,
it's still better/safer than what was done here before.

Initialize IPsec logging array before use. Fixes #8857

Remove sshguard and fail2ban

Fix #7694: Replace sshlockout_pf by sshguard