pfSense

Add a ZFS reservation of 10%

Add a bit more output when figuring out which distfile cache to use

Do not change ports value for PPPoE/L2TP/PPTP on interfaces.php page. Fixes #12498

Automatic outbound NAT for Reflection IPv6 support. Fixes #12500

IPsec Keep Alive Gateway Group CARP support. Fixes #12472

Allow to delete limiter referenced in filter rules. Fixes #12503

Try to use the distfiles cache for our branch but fall back if needed

This will allow us to avoid downloading everything new when we start a
new release

Save the distfiles to s3 with the git branch as part of the name

This will help us clean out old distfiles we do not need while providing
the ability to keep old distfiles around if we need to build a point
release for an older branch.

Clean up old distfiles using poudriere distclean

status_logs_settings.php logcompression value fix. Issue #12011

Add Chelsio T6 CXGBE (cc) to ALTq capable list. Fixes #12499

Change traffic shaper wizard default bandwidth type to Mbit/s. Todo #12501

Wake All Devices confirmation prompt. Implements #12480

Do not detach ng_ether from physical interfaces

There's no measurable performance impact¹ of leaving an unused ng_ether
node attached to ethernet interfaces, so don't waste time trying to
ensure we only attach to interfaces where we expect to use netgraph....

IPsec SPD status updates. Implements #12397

• Fix backend parsing of setkey data
• Check for VTI vs tunnel mode
• Output mode in GUI status, and VTI interface name if available
• Make directionality of endpoints and arrow icon match in both the
  direction column and tunnel endpoints column.

Revise IPsec widget icon behavior. Fixes #12347

• Change P1 status test so it can detect the "connecting" state and show
  a distinct icon.
• Use gettext() for icon tooltip text
• Code optimization

vim-console is now a FLAVOR

Elliptic Curve 25519, 448 bit -> Elliptic Curve 448, 448 bit PH2 rename. Fixes #12350

Delete stale OpenVPN RADIUS ACL generated rules. Fixes #12481

Tell us the name of the logs tarball so we don't have to go hunting through s3

Allow to select PPPoE Server authentication protocol. Implements #12438

DNS check optimization for NDP diag page. Fixes #11512

Send notification on WebGUI reboot/reroot/halt. Implements #12441

Icon for traffic direction on floating rules tab. Implements #12433

Fix OpenVPN status page halt function when client_id=0. Issue #12416

Update DNS Server Override and DNS Query Forwarding help text. Todo #12449

IPsec PC/SC daemon status / services page fix. Issue #12468

Remove stale captiveportal_online_users file on boot. Fixes #12455

Set Gateway creation radio button to Both by default. Fixes #12448

Send reboot/reroot/halt notification. Implements #12441

Reset CP DB on unclean shutdown if preservedb option is not enabled. Fixes #12355

GRE/GIF interface configure fix. Issue #12288

deleteVIP() input validation fix. Issue #12442

Elliptic Curve 25519, 448 bit -> Elliptic Curve 448, 448 bit rename. Fixes #12350

Mute kernel messages on dummynet and thermal hardware modules load. Fixes #12454

Allow to use /0 netmask on IGMP Proxy edit page. Fixes #7749

Traffic Shaper Wizard IPv6 support. Implements #4769

Use proxy for DDNS Check IP Services. Feature #12342

Ticket #12456: Retire Zabbix 5.2 packages

Dynamic DNS proxy option. Fixes #12342

Slack Notifications. Feature #12291

NAT 1:1 pseudo-interface input validation fix. Issue #12408

OpenVPN Generated RADIUS ACL Ruleset for status_output. Implements #12316

Modal window to see RADIUS ACL generated rules on the status_openvpn.php page. Implements #12321

IPsec PH2 BINAT subnet size input validation. Todo #12430

Do not check subnet overlapping on 6RD interfaces. Fixes #12371

Display default Reflection Timeout value. Feature #12318

1:1 NAT destination entries description fix. Issue #12410

DNS check optimization. Fixes #11512

IPv6 Port Forwarding Proxy+NAT input validation. Fixes #12319

fix #11734 NAT overlap validation does not check special networks

deleteVIP() IPsec PH1 input validation. Fixes #12356

Correct input validation on deleting a CARP VIP which is referenced by an IP Alias. Fixes #12362

Improve XMLRPC Sync for dhcpd. Fixes #10955

Reload syslogd on log Rotation Size / Retention Count change. Fixes #12366

Allow to halt OpenVPN client on status page. Issue #12416

Do not show Configuring IPsec VTI interfaces message at boot if no VTIs are configured. Fixes #12419.

Swap Captive Portal Redirection URL and Blocked MAC redirect URL input validation messages. Fixes #12388

Update help text for RAM disk settings. Fixes #12389

Remove unused function from pfsense-utils.inc. Todo #12406

6RD Prefix input validation. Fixes #12435

Default preferred lifetime input validation. Fixes #12439

Fix IPsec P2 Keep Alive mobile check. Issue #12398

Fixes redmine #12396

Bump up the config version to match a change in plus.

Keep 'enableserial_force' in /conf when a factory reset is performed.

Ticket: #6880

Some small cleanups with disk widget and library code.

Fix Disks widget UI on UFS systems

```
PHP 7.4.22 | 10 parallel jobs
............................................................ 60/279 (21 %)
............................................................ 120/279 (43 %)
............................................................ 180/279 (64 %)...

Fix PHP error on firewall_aliases_edit.php page. Issue #2668

Rename incorrect reorder function name in firewall_nat_out.php. Fixes #12377

Remove unused net/realtek-re-kmod from package repo

Move hwcrypto call to sysinfo widget

Do not restart IPsec on every gateway alarm. Fixes #12039

additional fix #7801 Include IPsec P2 address type in vpn_networks

Fix disk widget upgrade script assuming widgets always have an index

• Removes disk usage from system information widget
• Adds Pfsense\Services\Filesystem\ library
• Adds new disk widget

captiveportal: fix ipfw rules

When we authorise a client we add it to the *auth(up|down) tables.
This means traffic will pass and not be forwarded, as piped traffic does
not pass through the firewall again (if net.inet.ip.fw.one_pass is set).

However, these rules are 'layer2', so when the traffic is passed it's...

Initial commit of useful dependencies provided by Composer

Make ssh PermitRootLogin conditional. Fixes #12346

IPsec Widget none/disabled tunnels fixes. Issue #12337

Group copy fix. Issue #12226

Fix the diag_defaults.php PHP errors, include the required file.

Submitted by: SteveW
Ticket: #12340

Use minimized version of treegrid dependency

Adds missing treegrid dependency

Yandex PDD DDNS token fix. Issue #12331

Fix NG 6792: Fix errors copying previous kernel

pfSense-kernel package pre-deinstall script makes a copy of current
running kernel (/boot/kernel) to /boot/kernel.old so it can be used to
boot system in some corner cases. It was using `cp -r` what is
obsoleted and was throwing some errors when symlinks are used....

Add boot msgs for final IPsec steps. Issue #12328

Use correct var f/OpenVPN IPv6 ACL. Fixes #12333

Fix variable name when referencing an OpenVPN IPv6 tunnel network while
creating a DNS Resolver ACL entry.

While here, also add a safety check to ensure we never attempt to add an
ACL with an empty address.

Fix the option 4 in menu, factory reset.

Correctly resolve VTI remote addr. Fixes #12328

Use ipsec_get_phase1_dst() to resolve an IPsec P1 remote gateway
address rather than passing an FQDN directly to ifconfig

Adds the TreeGrid plugin for jQuery to the pfSense UI stack.(https://github.com/maxazan/jquery-treegrid)

Adds the TreeGrid plugin for jQuery to the pfSense UI stack.(https://github.com/maxazan/jquery-treegrid)

IPsec PH2 AH proposals order fix. Issue #12323

Do not disable hash algorithms checkboxes in AH mode. Fixes #12324

Ticket #12151: Pacify PHP lint using static string

OpenVPN exit notify & inactive incompatibilities

• Ignore exit notify in problematic cases. Fixes #12102
• Ignore inactive seconds in problematic cases. Fixes #12219
• Warn against using these options in problematic scenarios
• Hide from the GUI in obvious incompatible scenarios

Cleanup and improve easyrule. Fixes #12151

Restart OpenVPN instances on Host and URL type aliases change. Issue #2668

OpenVPN Aliases support. Implements #2668

Revert "Ticket #12235: pfSense-rc: Save pkg_set_version"

This reverts commit 340c9ab1d1eb1b959dc2292872866bca7e123665.