pfSense

Write to the correct file in backup_config()

Fix regression from 1c033a063dfefae07edce13736f7a00b734aa5d9

Automatically check "Allow IP options" when IGMP is selected. Implement #16110

Allow matching on IP Options with firewall match rules. Implement #16215

Improvements to plugin_xmlrpc functions

- The "merged in config" log may not show all merged sections. Fix this by
not clobbering the "$sections" variable.
- Fix variable expansion in the xmlrpc_recv plugin error logs.
- Pass the return value of "plugin_xmlrpc_recv" to...

Sync writes for critical data

PHP 8.1 introduced native support for fsync(); use this to bring back the
functionality removed with c5663bf5c9a830d5c265bd26e875ce271081eb3f.

Tune ZFS TXG and config dataset settings. Implement #16210

Increase vfs.zfs.txg.timeout so more writes are coalesced before they
are flushed to storage. Also change the ZFS dataset for the config to
always sync to mitigate the increased potential for critical data loss.

Fix ACB timezone conversion. Fix #16209

Lets the client show ACB timestamps using the local timezone.

poudriere_bulk: add security/snort3

poudriere_bulk: add dns/coredns

rc.restore_ramdisk_store: make removing the backup directory non-fatal

Make sure a valid monitor address exists when creating the rule.

Followup to 83637fdf058f0f9207ca339fb9bc44728f9dbd28.

Improve gateway monitoring. Fix #16180

Revert the changes from 3b5f0ecbfc2d952891dbe227e9afbf9d2ed0ebd4 since
routing an address via an interface causes the system to treat it as
local and send IPv6 NS requests to addresses that may not be local. As
an alternate solution, add filter rules to prevent gateway monitoring...

Bump config version

Remove interface_isppp_type_ephemeral()

Correct a copy/paste error and escape shell args where downing if_pppoe iface

Always bring if_pppoe interfaces down before destroying them

For kernel if_pppoe interfaces, when the interface is destroyed it is removed
immediately without sending a Term-Request. This leaves the other end of the PPP
tunnel established until it times out from lack of response. In the interim, if...

Add interface network aliases even if empty. Fix #16182

This changes the behavior for interface "subnet" aliases to be included in
/tmp/rules.debug even when the alias is empty. This matches how other
aliases are handled. When an alias is empty and a rule references it,...

Fix updating renamed aliases with multiple entries

Previous behavior only checked single-entry aliases. This change allows
calling update_alias_names_upon_change() with a spearator to loop
through the alias and update all entries.

Sync config revision

Fix double rc.newwanipv6 execution on if_pppoe

When using if_pppoe and DHCPv6 over the PPP link, both the devd handler script
and dhcp6c execute /etc/rc.newwanipv6 as a result of an address assignment,
which is not fatal but does cause some extra delay as the filter is reloaded and...

Double-escape HTML characters for use in HTML attribute. Fix #15415

pppoe-handler: Mute spurious invalid address warnings

Move the address checking out of the main body of the script into switch cases
that actually use the address

(cherry picked from commit 51ce224e061a26728bb42d11d238a11bbd989850)

Fix serialization/deserialization of ppp hostuniq and provider attributes

When these two properties were added, the form handling set their config values
to boolean true if empty, leading to empty tags in the config.xml which would be
serialized to the config.cache as empty strings. As a result, later fetches of a...

if_pppoe: Resolve endless loop on dhcp6c

When using if_pppoe, the use of ppp-ipv6 to up the pppoe interface on ADDR_ADD
causes a loop of calling interface_dhcp6_configure(), which
restarts dhcp6c, which acquires a lease and assigns an address, which emits an...

Check input validation before prompting to apply settings. Fix #16162