pfSense

Add option to set IPsec filtering mode. Implements #11395

User can choose between filtering enc (tunnel+VTI) or filtering on
assigned VTI interface tabs (VTI only, drops all tunnel mode traffic).
See https://redmine.pfsense.org/issues/11395 for details.

Fix Microsoft's idea of an apostropphe

Increment requested copyright version

Revise copyright modal to accommodate larger content

Use new URLs for pkg repo

Use Netgate domain for bogons. Issue NG 5446

Detect Plus by product label

Rename Factory -> Plus

This file moved, remove old copy. Fixes #11389

Revert "Refactor system_advanced_misc for MVC"

This reverts commit c33b0ab6c2fcd4c9786d1b5e7903c01fa1fafa7d.

Refactor system_advanced_misc for MVC

Typo

Add registered trdemark symbol where appropriate

Nested alias checking fix. Issue #11372

Return correct Track IPv6 address if >1 VIP on interface. Issue #5999

Respect REPO_BRANCH_PREFIX on FREEBSD_BRANCH

It's time to move to 2.6.0-DEVELOPMENT

Remove what I suspect is a debug leftover

OpenVPN rmdir fix. Issue #11254

Check RA service on interface IPv6 type change. Fixes #11367

Style fixes

OpenVPN User Auth fix. Issue #11368

OpenVPN input validation fix. Issue #11362

Fixed #11328 by fixing jQuery and error when 'protocol' is undefined

Captive Portal custom logo fix. Issue #11360

Fix #8954: Enable hn_altq_enable on default config

Refactored system_advanced_* pages for MVC

Sanitize PKCS11 PIN from swanctl.conf. Issue #11348

Sanitize securiteinfo_id. Issue #11344

Sanitize DHCP DDNS keys. Issue #11342

Sanitize WireGuard PresharedKey from config. Fixes #11341

Issue #11340
Hide WireGuard interfaces on DHCP/DHCPv6 Relay pages,
Hide mediaopt field for WireGuard interfaces on interfaces.php page

Hide TLS keydir for p2p openvpn mode. Issue #11336

Add brackets around IPv6 endpoint address. Issue #11338

Clarify that Peer WireGuard Address can be multiple addrs.

Merge pull request #4498 from BBcan177/Fixes

Update vpn_wg_edit.php

• Text edits
• Formatting
• Remove debug console.log()

Gateway Group Policy rule creation fix. Issue #11298

OpenVPN Server page fields hide fix. #11272

Delete all OpenVPN related files on instance deletion. Issue #11254

Mute console before load crypto modules

Fix WireGuard interface name assignment. Fixes #11323

Only set the name when it's empty/unset (e.g. when first created),
automatically determine the next available wg interface number.

WireGuard: Always derive public key. Issue #11322

If the user enters a different private key, using the supplied public
key would lead to a mismatch. So always derive the public key when saving.

WireGuard: Make pubkey read only, populate automatically. Fixes #11322

While here, add a link to copy the public key to the clipboard.

Merge branch 'viktor/pfSense-ipsecmobileinperror'

Mobile IPsec certificate validation. Issue #11319

Fix PHP error in Mobile IPsec validation if Group Auth is selected. Fixes #11212

Update OpenVPN Wizard to match current server options. Fixes #10919

Fix WG Keep Alive field variable name. Fixes #11288

Fix WG Generate button descr.

Improve WireGuard field labels & descriptions.

Improve WireGuard port validation. Fixes #11311

Encode WireGuard tunnel edit/peer values. Issue #11312

Encode WireGuard tunnel list values. Issue #11312

Suppress errors when opening router file. Fixes #11314

Merge branch 'viktor/pfSense-checkipsecwildcardcert'

IPsec wildcard certificates input validation. Implements #11297

Attempt to use peer wg address if possible for gateway. Implements #11300

Add WireGuard to backup areas. Implements NG 5485

Refine Unbound auto ACL generation. Implements #11309

Rework WireGuard tonatsubnets/unbound ACL entries. Fixes #11304

Init var before use. Fixes #11307

Add units to source tracking timeout description. Fixes #11303

Allowe peer port < 512

Allowe listen port < 512

Use correct default MTU for WireGuard. Fixes #11291

Fix length check for WireGuard interface descriptions

Add WireGuard to easyrule

Exclude wg(4) from auto outbound NAT. Fixes #11289

PPPoE Server users create and instance delete fix. Issue #11282

Fixed 11287 by moving style to css

Use gettext() on WireGuard endpoint text. Issue #11286

Assume default WG port if empty. Fixes #11286

While here, print a more user-friendly value when peer endpoints are
empty.

Fix populating keepalive value. Fixes #11288

Assume default WG port if empty. Fixes #11286

Add doubleclick handlers to WireGuard tables

Revert "Add wg to ALTQ list. Implements #11280"

Unstable. See #11285

This reverts commit 4a49b0d9b182c76f658201124c43278a65542c98.

Add help.php entries for Wireguard pages. NG 5455 and Fixes #11283

Fix WireGuard case

Ticket #5186: Enable Wireguard firewall rules tab

Correct typo. Fixes #11279

Add wg to ALTQ list. Implements #11280

Prevent invalid WireGuard assignments. Fixes #11277

Show WireGuard interface description during assignment. Issue #11277

WireGuard assignment/disable behavior improvements. NG 5518

• Do not allow a WireGuard instance to be removed while assigned
• Do not allow a WireGuard instance to be disabled while assigned
• Destroy the WireGuard interface when disabled

Add WireGuard info to status output. NG 5483

WireGuard default port usage fix. NG 5482

Signed CSR import fix. Issue #11275

Add ^wg to list of interface mimatch types

Add OS routes using WireGuard Peer AllowedIPs. Part of NG 5437

Remove WireGuard peernwks field which is not needed. Part of NG 5437

Fix some bad WireGuard capitalization

Automatic WireGuard interface gateways. Part of NG 5437

Update translation files

Regenerate pot

Retire VXLAN support

VXLAN support is not enterprise ready and after internal discussion we
decided we are not able to support it. We are committed to release
features only when they are ready.

Change XML listtag entry for peer to wgpeer for issue #5186

Fix copyright notices

Remove commented out code

Spell WireGuard properly