UnivNautes

Bump version to 2.1.4

Fix #3691, use curl instead of fetch to download update files

Fix #3691, use curl instead of fetch to download update files

Whitespace fixes

Allow the user to select "None" for OpenVPN client certificate, so long as they supply and auth user/pass. Ticket #3633

Just use ID here instead.

Various fixes to diag_dump_states.php (Add interface column, some extra validation safety, etc). Should fix #2121

allow ipaliases to be configured on lo0

Silent pbi_info

Update csrf-magic to 1.0.4

Reduce possible noise

Merge pull request #1226 from ExolonDX/branch_master_04

Merge pull request #1225 from ExolonDX/branch_master_03

Merge pull request #1224 from ExolonDX/branch_master_02

Merge pull request #1223 from ExolonDX/branch_master_01

Tidy up "status_queues.php" XHTML

Add closing BODY and closing HTML tags if "traffic shaping is not
configured."

Tidy up "status_openvpn.php" XHTML

Move the closing FORM tag after the PHP check if there are any OpenVPN
instances.

Tidy up "diag_dns.php" XHTML

Move the "=" sign into the first table cell, this allows the output to
line up in the second cell,
Tidy up the table from the "resolution time" output.

Tidy up "crash_reporter.php" XHTML

Tidy up Paragraph tags
Close INPUT tags

Handle firewall log filter regex input better bug #3689

If the user inputs an invalid regex in any of the filter fields, then a page full of "warning" messages appear in the GUI, about whatever is invalid.
If for some reason the user wants to match a forward slash somewhere, then they have to realize to escape it, doing "\/" instead of just "/". Be nice to this special case, because the user does not necessarily know that "/" is being used as the delimiter in the preg_match call. Turn "/" into "\/" (when the "\" is not already put in by the user)....

allow ipaliases to be configured on lo0

Merge pull request #1219 from nagyrobi/patch-13

Fix filename

Fix variable name

remove openbgpd bits from system_gateways_edit and system.inc. The package
match is case-sensitive and hasn't matched the openbgpd package's name in
at least 5 years, so it doesn't do anything. It's far from functional in
any useful manner even fixing that issue.

remove openbgpd bits from system_gateways_edit and system.inc. The package
match is case-sensitive and hasn't matched the openbgpd package's name in
at least 5 years, so it doesn't do anything. It's far from functional in
any useful manner even fixing that issue.

Drop a note on the page about how to repair a failed mirror.

Bring in proper gmirror support for the GUI and notifications.
Made a general gmirror library to perform various gmirror tasks and get information, using some of the former widget logic to start. Updated widget to use this new code.
Added a Diag > GEOM Mirrors page that displays information about existing mirrors and perform various management tasks. Current actions include rebuilding a drive, forgetting disconnected mirror drives, insert/remove, deactivate/activate, clearing medatada. It's now possible to use the GUI to rebuild a failed mirror by performing a forget, then insert action to replace a missing/dead drive....

glob() is already called by unlink_if_exists

client-config-dir is also useful when using OpenVPN's internal DHCP while bridging.

client-config-dir is also useful when using OpenVPN's internal DHCP while bridging.

Add @ to silent any possible return of posix_kill

Fix typo

Improve /etc/sshd:

. Create ed25519 key for ssh and silent daemon
. Remove some exec() calls
. We do not need to re-create all keys if /root/.ssh/authorized_keys is
empty
. Remove some redundancy and declare a single array with all keys

Include the v4 prefix on the v6 netmask to make routing more sane and alos tracking interface configurations work!

Merge pull request #1220 from ExolonDX/branch_master_01

Tidy up "diag_tables.php" XHTML

Add BODY tag
Add ACTION to FORM tag
Add CDATA section to SCRIPTS
Remove NAME from OPTION tag, not valid in XHTML
Update HTML Boolean operators
Add SUMMARY to TABLE
Close IMG tag and add ALT
Move closing Anchor tag into PHP staement...

Unset iflist and iflist_disabled

Unset iflist and iflist_disabled

Update services_ntpd.php

Add validation for the case of no server specified, fall back to pool.ntp.org

Show disabled interface when it was already part of interface group, it avoids to show a random interface instead and let user to add it by mistake. It should fix #3680

Show disabled interface when it was already part of interface group, it avoids to show a random interface instead and let user to add it by mistake. It should fix #3680

bring protocols on NAT edit page more in line with rule edit page

Convert protocol ssl:// to https:// when creating http headers

Merge pull request #1217 from nagyrobi/patch-15

Merge pull request #1216 from nagyrobi/patch-14

Merge pull request #1212 from ExolonDX/branch_master_04

Merge pull request #1211 from ExolonDX/branch_master_03

Merge pull request #1210 from ExolonDX/branch_master_02

Merge pull request #1209 from ExolonDX/branch_master_01

Update services_ntpd_gps.php

Fixed MRC->RMC typos in sentence types, display and fine-tuning for SureGPS card.

Update rrd.inc

fixed NTPd graphs resetting when service restarts or reconfigured (thanks charliem https://forum.pfsense.org/index.php?topic=76620.msg422811#msg422811)

Use script-friendly gmirror status output to build this info, old method was breaking output when the mirror was being rebuilt.

Make sure check_reload_status is stopped so it can be upgraded and no events disturb the upgrade.

Remove the space here which probably is preventing from calling sshd from fcgi

Make logging of pass rules opt-in rather than opt-out

Split the setting of logging pass and block into 2 separate settings. Maybe this can be extended to control even the user rules?

Trim whitespaces from options text and fix #3674

Add ICMP to filter parser, it should fix #3663

Tidy up "system_firware" XHTML

Remove WRAP from TEXTAREA and add Javascript to add wrap hard

Tidy up Ampersand XHTML

Deprecate Ampersand in Anchor tags

Tidy up misc. XHTML

Close FORM tag correctly
Add missing TD and TR tags
Move NOWRAP into CLASS statement

Tidy up "system_usermanager.php" XHTML

Add CLOSEHEAD varialbe and manually close HEAD
Add CDATA sections to SCRIPTS
Deprecate Ampersand in Anchor tags
Remove NAME from TR tag, not valid in XHTML
Remove WRAP from TEXTAREA and Javascript to take wrap off

Add (self) for an outbound NAT source as well

Let (self) be used on port forward destinations also

Add (self) keyword for specifying "any IP address on this firewall" as a rule choice.

Fix typo

bring protocols on NAT edit page more in line with rule edit page

Clarify usage for not/and/or in host field

Add some rudimentary and/or logic to the host field of packet capture.

Allow for negation of protocol, host, or port number when capturing packets.

Merge pull request #1154 from ExolonDX/branch_master_01

Merge pull request #1149 from phil-davis/patch-7

Merge pull request #1205 from ExolonDX/branch_master_59

Merge pull request #1204 from ExolonDX/branch_master_58

Merge pull request #1203 from ExolonDX/branch_master_56

Merge pull request #1202 from ExolonDX/branch_master_54

Merge pull request #1201 from ExolonDX/branch_master_53

Merge pull request #1200 from ExolonDX/branch_master_52

Merge pull request #1199 from ExolonDX/branch_master_51

Merge pull request #1198 from ExolonDX/branch_master_50

Merge pull request #1196 from ExolonDX/branch_master_46

Merge pull request #1195 from ExolonDX/branch_master_45

Merge pull request #1194 from ExolonDX/branch_master_44

Merge pull request #1193 from ExolonDX/branch_master_43

Merge pull request #1192 from ExolonDX/branch_master_42

Merge pull request #1191 from ExolonDX/branch_master_41

Merge pull request #1190 from ExolonDX/branch_master_40

Merge pull request #1189 from ExolonDX/branch_master_39

Merge pull request #1188 from ExolonDX/branch_master_38

Merge pull request #1187 from ExolonDX/branch_master_37

Merge pull request #1186 from ExolonDX/branch_master_36

Merge pull request #1185 from ExolonDX/branch_master_34

Merge pull request #1183 from ExolonDX/branch_master_32

Merge pull request #1180 from ExolonDX/branch_master_29

Merge pull request #1178 from ExolonDX/branch_master_26

Merge pull request #1177 from ExolonDX/branch_master_25

Merge pull request #1176 from ExolonDX/branch_master_24

Merge pull request #1175 from ExolonDX/branch_master_23

Merge pull request #1173 from ExolonDX/branch_master_21

Merge pull request #1172 from ExolonDX/branch_master_20

Merge pull request #1171 from ExolonDX/branch_master_19

Merge pull request #1170 from ExolonDX/branch_master_18

Merge pull request #1169 from ExolonDX/branch_master_17

Merge pull request #1168 from ExolonDX/branch_master_16

Merge pull request #1167 from ExolonDX/branch_master_15

Merge pull request #1166 from ExolonDX/branch_master_14

Merge pull request #1164 from ExolonDX/branch_master_12

Merge pull request #1163 from ExolonDX/branch_master_11

Merge pull request #1162 from ExolonDX/branch_master_10

Merge pull request #1161 from ExolonDX/branch_master_09

Merge pull request #1160 from ExolonDX/branch_master_08

Merge pull request #1159 from ExolonDX/branch_master_06

Merge pull request #1158 from ExolonDX/branch_master_05

Merge pull request #1157 from ExolonDX/branch_master_04

Merge pull request #1156 from ExolonDX/branch_master_03

Merge pull request #1155 from ExolonDX/branch_master_02

Display space usage for all mounted filesystems, not just /. Also display FS type and indicate if it's a RAM disk.

Properly handle this rename, and squelch errors if it fails.

Properly handle this rename, and squelch errors if it fails.

Delete all ip aliases when interface is disabled, it should fix #3650

Delete all ip aliases when interface is disabled, it should fix #3650

Fix package changelog link when package doesn't has its own directory inside config subdir. Ticket #3672

fix variable typo. ticket #3669

fix variable typo. ticket #3669

This is not true any longer (and required for L2TP+IPsec)

Correct variable test here, too. Ticket #3662

Restore 989d361e88d08bd9e71bf7daafcb3b39af65bd3d to preserve a scenario that seems useful as suggested from @fitchner.

Remove commented out code since long time

Remove a line spotted by @fitchner which is not needed at all

Put a line on logs when this situation happens!

Update SCRIPT tags.

Add CDATA sections to SCRIPT tags in various files

Tidy up "diag_logs_ipsec" "service_unbound_acls"

Move NOWRAP into class statement

Update services_captiveportal_filemanager.php

Move NOWRAP into class STATEMENT

Update services_captiveportal_couchers.php

Move NOWRAP to class statement

Update services_dhcpv6.php

Move NOWRAP into class statement

Tidy up "log.widget.php" XHTML

Add CR to SCRIPT
Update HTML Boolean operators
Move NOWRAP into CLASS statement
Deprecate Ampersand in Anchor tags
Add dummy row to TBODY, but don't display it.

Fix test (variable is a checkbox, not an array/string). Fixes #3662

Use correct variable name here.

Update services_dhcp_edit.php

Change ONCLICK to lower case

Tidy up "services_dhcp.php" XHTML

Change ONLICK to lower case
Change P tags to BR tags
Move opening TR tag inside the PHP IF statement

Tidy up "services_dhcp_relay" XHTML

Move closing BODY and closing HTML tags after the PHP FEND.INC statement

Tidy up "interfaces.php" XHTML

Tidy up Anchor tag and PHP GETTEXT
Swap double quote and semi-colon in ONLICK statement

Tidy up "system_gateway_groups.php" XHTML

Change P tag to BR tag
Add missing closing TD tags
Change TR row to a hidden row

Tidy up "system_camanager.php" XHTML

Change ONCHANGE to lower case
Move NOWRAP into CLASS statement

Tidy up "diag_dns.php" XHTML

Add SUMMARY to TABLES
Close INPUT tags
Add missing closing FONT tags
Deprecate Ampersand in Anchor tags
Change _new to _blank in Anchor tags
Add missing closing BODY and closing HTML tags

Tidy up "diag_traceroute.php" XHTML

Add SUMMARY to tables
Close INPUT tags
Update HTML Boolean operators
Change PRE tag to a TEXTAREA tag and add JavaScript code to take off
warp
Add missing closing FONT, closing BODY and closing HTML tags

Tidy up "diag_testport.php" XHTML

Add SUMMARY to TABLES
Close INPUT tags
Update HTML Boolean operators
Change PRE tag to a TEXTAREA tag and add JavaScript code to take off
warp
Add missing closing FONT, closing BODY and closing HTML tags

Tidy up "diag_system_activity.php" XHTML

Move PHP "fbegin.inc" between BODY and SCRIPT
Add CDATA sections to SCRIPTS
Merge FONT tags and escape closing PRE and FONT
Move closing DIV tag to outside the TABLE tag

Tidy up "diag_states_summary.php" XHTML

Add SUMMARY to TABLES
Update single quotes to double quotes in HTML
Add missing BODY, closing BODY and closing HTML tags

Tidy up "diag_dump_states" and "diag_resetstat"

Add CDATA sections to SCRIPTS
Add SUMMARY to TABLES
Add missing closing FORM tag
Update HTML Boolean operators
Close INPUT tags

Tidy up "diag_sockets.php" XHTML

Add SUMMARY to TABLES
Change "onclick" to lower case
Remove closing FONT tag
ID cannot start with a number, so add PHP $name variable
Remove duplicate closing TABLE tag
Remove duplicate BORDER statement
Add missing closing BODY and closing HTML tags

Tidy up "diag_smart.php" XHTML

Add PHP "closehead" variable
Add CDATA sections and TYPE to STYLE tag
Add SUMMARY to TABLES
Update HTML Boolean operators
Tidy up OPTION tags

Tidy up "diag_routes.php" XHTML

Move PHP "fbegin.inc" between BODY and SCRIPT
Add SUMMARY to TABLES
Update HTML Boolean operators
Add missing closing BODY and closing HTML tags

Tidy up "reboot.php" XHTML

Move BODY tag before PHP "fbegin.inc"
Close INPUT tags

Tidy up "edit.php" XHTML

Add PHP closehead variable and close HEAD manually
Add CDATA sections to SCRIPTS
Add SUMMARY to TABLES
Add JavaScript code to take off wrap in TEXTAREA tag

Tidy up "diag_ping.php" XHTML

Add SUMMARY to TABLES
Close INPUT tags
Update HTML Boolean operators
Change the PRE tag to a TEXTAREA tag and ad a piece of JavaScript code
to take off the warp
Add missing closing BODY and HTML tags

Make some fixes related to Ticket #3662. Its mostly cleanup.

test

Tidy up "diag_system_pftop.php" XHTML

Move PHP include FBEGIN between BODY and SCRIPT
Add CDATA sections to SCRIPTS
Merge "face" and "size" into on FONT tag and escape closing PRE and FONT
Remove duplicate opening FORM tag
Add SUMMARY to TABLES
Update HTML Boolean operators...

Tidy up "diag_packet_capture.php" XHTML

Add SUMMARY to TABLES
Update HTML Boolean operators
Close INPUT tags
Remove TYPE from INPUT tags, invalid in XHTML
Remove WRAP from TEXTAREA,, invalid in XHTML
Add ID statement to TEXTAREA, add a piece of JAVASCRIPT to read the ID...

Tidy up "diag_ndp.php" XHTML

Close IMG tag and ALT to IMG
Add SUMMARY to TABLES
Add CDATA section to SCRIPT
Add missing closing BODY and closing HTML tags

Tidy up "diag_limiter.php" XHTML

Move PHP include FBEGIN between BODY and SCRIPT
Add CDATA sections to SCRIPTS
Merge "face" and "size" into on FONT tag and escape closing PRE and FONT
Add SUMMARY to TABLES
Remove NAME statement from DIV tag
Remove closing FORM tag and move closing DIV tag outside TABLE

Tidy up "halt.php" and "diag_defaults.php" XHTML

Close INPUT, STRONG and P tags

Tidy up "exec.php" XHTM

Add "closehead" PHP variable
Add CDATA sections to SCRIPTS and STYLES
Add TYPE to STYLES
Add hard space to closing PRE tag, otherwise if the PRE tag is empty it
will error
Add SUMMARY to TABLE
Close INPUT tags
Move closing FORM tag into DIV tag

Tidy up "diag_confbak.php" XHTML

Move VALIGN to STYLE statement
Add the colour WHITE other BGCOLOR will display error
Add SUMMARY to TABLES
Close INPUT and IMG tags
Move NOWRAP into CLASS statement
Remove duplicate closing FORM tag

Tidy up "diag_backup.php" XHTML

Add CDATA sections to SCRIPTS
Add SUMMARY to TABLES
Update HTML Boolean operators
Close INPUT tags
Add missing closing P tag

Tidy up "diag_authentication.php" XHTML

Add SUMMARY to TABLES
Update HTML Boolean operators
Add missing closing FORM, closing DIV, closing BODY and closing HTML

Tidy up "diag_arp.php" XHTML

Close IMG tags and and ALT
Add SUMMARY to TABLES
Add CDATA sections to SCRIPTS

Tidy up "status_graph" XHTML

Move "fbegin.inc" between BODY and SCRIPT
Add CDATA sections to SCRTIPS
Update HTML Boolean operators
Remove EMBED, propriietary tag, replace with OBJECT
Add SUMMARY to TABLES
Add missing closing P tag
Close INPUT tags

Tidy up "diag_logs filter" XHTML

Change ONCLICK to lowercase
Tidy up closing TD tags
Add dummy row to TBODY, but don't display it
Add missing closing TD and closing TR tags

Tidy up "diag_logs_filter.php" XHTML

Change "sortableMultirow" to a STYLE
Add missing quotes
Tidy up TD tags
Remove THEAD and TFOOT.
Move NOWRAP into CLASS statement
Add CDATA sections to SCRIPTS

Update status_lb_vs.php

Add missing closing TD and closing TR tags

Update status_lb_pool.php

Add missing closing TD and closing TR tags

Update status_captiveportal.php

Add missing closing TD tag

Tidy up "status_queues.php" XHTML

Add CDATA sections to SCRIPTS
Add SUMMARY to TABLES
Move NOWRAP into CLASS statement

Tidy up "status_openvpn.php" XHTML

Add CDATA sections to SCRIPTS
Add SUMMARY to TABLES
Change NAME to ID in TR tags
Closing IMG tags and add ALT to IMG
Add missing closing FORM, closing BODY and closing HTML

Tidy up "status_ntpd.php" XHTML

Add SUMMARY to TABLES
Move NOWRAP into CLASS statement
Change TD class to LISTR

Tidy up "status_lb" XHTML

Add SUMMARY to TABLES
Update HTML Boolean operators
Close INPUT tags

Tidy up "diag_ipsec" XHTML

Add SUMMARY to TABLES
Move NOWRAP into CLASS statement
Close INPUT and IMG tags and add ALT to IMG tag
Add dummy row to TBODY but don't display it
Deprecate Ampersand in ANCHOR tag

Tidy up "status_filter_reload.php" XHTML

Close INPUT tags
Remove NAME from DIV tags, not valid in XHTML
Add CDATA section to SCRIPTS
Close IMG tags and add ALT to IMG

Tidy up "status_dhcpv6_leases.php" XHTML

Add SUMMARY to TABLES
Move spaces to $fspans and $fspane
Close INPUT and IMG tags and add ALT to IMG
Deprecate Ampersand in Anchor tags

Tidy up "status_dhcp_leases.php" XHTML

Add SUMMARY to TABLES
Updates spaces in $fspans and $fspane
Close INPUT and IMG tags and ALT to IMG
Deprecate Ampersand in Anchor tags

Tidy up "carp_status.php" XHTML

Add SUMMARY to TABLES
Close INPUT tags and IMG tags and ALT to IMG
Tidy up CENTER tags
Add missing closing FORM tag

Tidy up "status_captiveportal" XHTML

Add SUMMARY to TABLES
Remove PHP ECHO that isn't in a PHP statement
Update HTML Boolean operator
Add COLSPAN to fill the width of the table
Move NOWRAP to CLASS statement
Close INPUT and IMG tags and add ALT to IMG
Add BODY between HEAD.INC and FBEGIN.INC...

Spell that correctly

Handle enc0->IPSec convertion. Should help Ticket #3664

Add "match" to floating rules

Add "match" to floating rules as proposed in the forums
https://forum.pfsense.org/index.php?topic=76611.0
Remove Windows Thumbnail cache files

Actually make this correct

Use subnet rather than address/netmask to allow multiple clients to behave properly

/etc/version_kernel and /etc/version_base no longer exist, use php_uname to get the info instead.

/etc/version_kernel and /etc/version_base no longer exist, use php_uname to get the info instead.

Move duplicated code into a function; Include local ID on mobile tunnel key line in ipsec.secrets.

Use the glob on 2.2 now as well for listing PPP serial devices.
Rather than doing auto-detection, fall back to a glob for now when listing potential PPP serial devices. This will allow us to push ticket #2433 back to 2.2 with a more proper long-term fix for the auto-detection.

Use the setkey proper path since ipsec-tools are not used anymore

Use the right specification for ahnding over the subnet to mobile clients

Do not specify the rightid in mobile tunnels since it makes things not work

Give needed +x flag to make working xauth proper

Oops this was moved accidentally

Correct sense of match and move the code up to since it makes more sense

Actually this should be rightauth2 since they should send the extra infor to be validated

bind HTTP->HTTPS redirect to IPv6 too. Ticket #3437

add guiconfig to widgets not including it. ticket #3498

add guiconfig to widgets not including it. ticket #3498

remove text not relevant to Allowed IPs. Ticket #3594

remove text not relevant to Allowed IP page. Ticket #3594

Merge pull request #1153 from miken32/master

Fix broken HTML elements and unescaped entities

Fix alignment of + button and P2 display after addition of IKE column to IPsec tunnel list.

Fix shortcut bar for ipsec to show the correct service.

Use function_exists test

Use function_exists test

Allow to use PSK+agressive mode since user should have the choice even though it poses security risks

Merge pull request #1150 from ExolonDX/branch_master_01

Merge pull request #1151 from ExolonDX/branch_master_02

PBIs are crashing without LOGNAME being defined in the environment, define it here until PBI is fixed

This slipped in wrongly

Allow a key to specified for all users as for exmpale when connecting from Apple iOS

Update links in "vpn_ipsec.php"

Update help links in "vpn_ipsec.php" to point to the correct page.

Tidy up "vpn_ipsec_phase1.php" XHTML

Add CDATA sections to SCRIPTS
Add SUMMARY to TABLES
Update HTML Boolean operators
Close INPUT tags

This needs to be lower case

Merge pull request #1131 from razzfazz/make_upnp_listen_on_if_optional

make listening on interface rather than IP optional for miniupnp

Pass the loglevels on the config rather than execing commands to specify these loglevels. This allows somethings to be properly logged as config logs

Fix call-time pass-by-reference in UPnP

Merge pull request #1147 from ExolonDX/branch_master_15

Merge pull request #1146 from ExolonDX/branch_master_14

Merge pull request #1144 from ExolonDX/branch_master_12

Merge pull request #1143 from ExolonDX/branch_master_11

Merge pull request #1142 from ExolonDX/branch_master_10

Merge pull request #1141 from ExolonDX/branch_master_08

Merge pull request #1140 from ExolonDX/branch_master_07

Merge pull request #1139 from ExolonDX/branch_master_02

Merge pull request #1138 from ExolonDX/branch_master_03

Merge pull request #1137 from ExolonDX/branch_master_04

Merge pull request #1135 from ExolonDX/branch_master_06

No need to have the ip let strongswan do it for us! Keeping still filterdns to properly evaluate dns behaviour here

Strongswan does not need the quotes here

Oops unbreak this

Show proper status for ipsec

Remove Proposal check as a racoon thingy

Remove generate policy option since its not relevant with strongswan

Use better looking description and remove base type from negotiation. This is only IKEv1 parameter. JS will be added later

Some adjustments to the code for logging

Allow to select IKE version to be used.

Use require_once in more places

Use require_once in more places

Use require_once in more places

I got:
PHP Fatal error: Cannot redeclare file_notice() (previously declared in /etc/inc/notices.inc:55) in /etc/inc/notices.inc on line 91
So there are places that notices.inc gets require() when already required.

Tidy up "vpn_pptp_users" XHTML

Add SUMMARY to TABLES
Close INPUT and IMG tags and add ALT to IMG
Move NOWRAP to CLASS statement
Deprecated Ampersand in Anchor tags
Add missing closing TR tag

Tidy up "vpn_pptp.php" XHTML

Add CDATA sections to SCRIPTS
Add SUMMARY to TABLES
Update HTML Boolean Operators
Close INPUT tags
Add missing closing TR tags and missing closing TD tags

Tidy up "vpn_openvpn_csc.php" XHTML

Add CDATA sections to SCRIPTS
Add SUMMARY to TABLES
Remove Unordered List for tabs
Close INPUT and IMG tags and ALT to IMG
Move NOWRAP into CLASS statement
Deprecate Ampersand in Anchor tags

Tidy up "vpn_openvpn_server.php" XHTML

Add CDATA section to SCRIPTS
Add SUMMARY to TABLES
Remove unordered list for tabs
Close INPUT and IMG tags and add ALT to IMG
Update HTML Boolean operators
Move TFOOT between THEAD and TBODY (quirk of HTML!)
Add dummy row to end of TBODY but don't display it...

Tidy up "vpn_openvpn_client.php" XHTML

Add CDATA section to SCRIPTS
Add SUMMARY to TABLES
Remove Unordered List for tabs
Close BR, INPUT and IMG tags and ALT to IMG
Move NOWRAP into CLASS statement
Deprecate Ampersand in Anchor tags
Move TFOOT between THEAD and TBODY (quirk of HTML!)...

Tidy up "vpn_l2tp_users" XHTML

Add SUMMARY to TABLES
Move NOWRAP to CLASS statement
Close IMG tags and add ALT statement
Deprecate ampersand in Anchor tags
Add missing closing TR tag

Tidy up "vpn_l2pt.php" XHTML

Add CDATA section to SCRIPTS
Add SUMMARY to TABLES
Update HTML Boolean Operators
Close INPUT tags

Tidy up "vpn_ipsec_phase2.php" XHTML

Move script after the FBEGIN.INC include
Add CDATA sections to SCRIPTS
Add SUMMARY to TABLES
Close INPUT tags
Update HTML Boolean operators

Tidy up "vpn_ipsec_keys" XHTML

Add SUMMARY to TABLES
Close INPUT and IMG tags and ALT
Move NOWRAP into CLASS statement
Deprecate ampersand in Anchor tags
Add missing closing BODY and HTML tags

Tidy up "vpn_ipsec_mobile.php" XHTML

Add CDATA sections to SCRIPTS
Add SUMMARY to TABLES
Close INPUT tags
Update HTML Boolean operators

Tidy up "vpn_ipsec" XHTML

Add CDATA section to SCRIPTS
Add SUMMARY to TABLES
Update HTML Boolean operators
Close INPUT and IMG tags and ALT to IMG tags
Move NOWRAP into CLASS statement
Deprecate ampersand in Anchor tags

Merge pull request #1130 from razzfazz/status_upnp_int_port

Merge pull request #1129 from razzfazz/status_upnp_int_port_master

Merge pull request #1134 from ExolonDX/branch_master_01

Tidy up "wizard.php" XHTML

Update HTML Boolean Operator
Remove duplicate closing TD tag

Merge pull request #1133 from msilvoso/master

Fix off-by-one in static route CIDR drop-down. /129 shouldn't be in the list

Fix firewall log widget rule lookup to consider tracker id.

Convert protocol ssl:// to https:// when creating http headers

Fix #3646, Revert part of 082c9d961e and fix highlight selected rules

Small cleanup

Merge pull request #1126 from ExolonDX/master

Partialy revert 0ae4f3f:

It broke xmlrpc_client since https is not a valid php transport.

Clarify description to state you must save first before attempting to reset the log file size.

Work around some quirks in global handling to show filter rule descriptions in their own row/column when configured for that behavior.

Revert "Respect protocol from URL"

This reverts commit 4f5bea8b6e2e6b0d5c1352539268d720826b4760.

Respect protocol from URL

make listening on interface rather than IP optional for miniupnp

Remove units from burst as it is always specified in bytes. (Per ipfw(8)).
Worked for me in testing, I watched a file briefly burst until and then be clamped down to the limiter's rate.

Remove units from burst as it is always specified in bytes. (Per ipfw(8)).
Worked for me in testing, I watched a file briefly burst until and then be clamped down to the limiter's rate.

Use egrep here (and full path)

Consider tracker IDs when looking up filter log entries, if present

Fix http and https port for cpzone

Use global cpzoneid variable

Drop double $$ from variable name

Remove redundant set

add column for internal port on UPnP status page

add column for internal port on UPnP status page

Silent kldstat

Sometimes fsck requires a second run, teach rc script to call it more than once when it's necessary

Merge the forgotten Ticket #3062 patch for CP pipeno leaking issue which leads to the 'Maximum login reached' on CP

Put .hushlogin even here to not be done from tools repo. Maybe some people would like to have that on rmlist.

Move the sh/profile files here as a more natural place to live in.

Obsolete old clog binary from /usr/sbin

Obsolete old clog binary from /usr/sbin

Merge pull request #1125 from msilvoso/master

Merge pull request #1127 from phil-davis/patch-6

Fix Bug #3627 Diagnostics: Tables - Remove button dont work after update to PfSense 2.1.2

This annoyed me also, so I thought it worth finding what changes exactly broke this.
del_entry was broken on 2.1 branch by https://github.com/pfsense/pfsense/commit/fe3088b965a99772e76622d17ceae87288471edc...

Bump version to 2.1.3-RELEASE

Tidy up "load_balancer_pool_edit.php" XHTML

Backout changes to the the SELECT tag from pull request 1104, further testing shows that it doesn't populate the disabled/enabled server list 100% correctly.

Migrate captive portal code to SQLite3 php module

sqlite module is now called sqlite3

Obsolete old php modules

Take care of interfaces that have no ip but might be part of the bridge as done for openvpn to avoid loops

Take care of interfaces that have no ip but might be part of the bridge as done for openvpn to avoid loops

Changes to make it work behind a bluecoat proxy - added a user agent, and changed url scheme

Oops specify mode of operation to fopen

Make the alias url processing functions not memory hungry!

Rewrite update_alias_url_data to be with small memory footprint. Also return the status if an update is performed to callers and remove the write_config call embedded here since its not good to have this by default.

Signal a reload if anything got updated

Signal a reload if anything got updated

Merge the patch suggested in Ticket #3629. It also Fixes #3629. The question is why this is using config lock? Also where is filter configure called here?

Merge the patch suggested in Ticket #3629. It also Fixes #3629. The question is why this is using config lock? Also where is filter configure called here?

Check the right field here

Check the right field here

Unbreak 'add rule on top of the list' allowing after param to be -1

Unbreak 'add rule on top of the list' allowing after param to be -1

Merge pull request #1124 from ExolonDX/master

Expose all p0f OS types that it supports so that subtypes of various Operating Systems can be detected

Fix kldstat match/output to check for a running module. It was claiming all modules were loaded so none were being loaded.

Tidy up "services_igmpproxy.php" XHTML

Move NOWRAP to class statement

Tidy up "services_ntpd_gps.php" XHTML

Update " "

Send HUP to restart syslogd rather than trying to restart it, thus loosing messages

make sure unbound is included here

Include Unbound in logic here

Reconfigure unbound on dhcpv4 edit

Reconfigure unbound on dhcp edit

Reconfigure unbound on dhcp edit

Also reconfigure Unbound here

Reconfigure Unbound for Rebind admin checks

Ensure config is global here

Ensure to reconfigure Unbound for filter configuration on XMLRPC

Handle 0MQ filter configure

If unbound is configured then assign it for the vpn service

If Unbound is been used then make sure to reload when system_hosts_generate() is called

Make sure unbound is reconfigured when interfaces are

Add space between configile and switch

Make sure domain+host overrides are deleted

Put .hushlogin even here to not be done from tools repo. Maybe some people would like to have that on rmlist.

Move the sh/profile files here as a more natural place to live in.

Move clog from /usr to /usr/local

Conflicts:
etc/inc/filter_log.inc
etc/inc/system.inc
etc/rc
usr/local/www/guiconfig.inc

Move clog from /usr to /usr/local

Add filterlog to separatefacilitylog to avoid logs going elsewhere

Change log level to error for php-fpm

Another dir to be created

Correct the definitions of certificate path to correct place to allow the daemon to start

Update binaries used

Put this here for easier troubleshooting and code reading. Helps with Ticket #3619

Use php module calls here to speedup things

Correct the ridirection URL to unbreak ones passed through Radius attributes and repsect user choices. Reported-by: Antoine Guillemot

Correct the ridirection URL to unbreak ones passed through Radius attributes and repsect user choices. Reported-by: Antoine Guillemot

Use the daemon name to send the filter logs

Merge pull request #1032 from fichtner/contributions manually since it does not apply cleanly

Merge pull request #1040 from fichtner/pw_userdel manually since it does not apply cleanly

Merge pull request #1082 from PiBa-NL/console_ssh_rules_reload

Merge pull request #1098 from camlin/master

Merge pull request #1117 from derelict-pf/nohttpsforwards

Merge pull request #1122 from razzfazz/miniupnp_listen_on_interface

Merge pull request #1123 from razzfazz/miniupnp_listen_on_interface_master

make miniupnpd listen on interface instead of IP

The 'listening_ip' option in miniupnpd.conf can accept an interface name
directly instead of having to translate it to an IPv4 address first. (This is
actually required if IPv6 support is enabled.)

make miniupnpd listen on interface instead of IP

The 'listening_ip' option in miniupnpd.conf can accept an interface name
directly instead of having to translate it to an IPv4 address first. (This is
actually required if IPv6 support is enabled.)

Don't refuse to delete a bridge in the GUI just because its bridge interface doesn't exist, just log that it doesn't exist and don't attempt to ifconfig destroy it, delete it from config

Don't refuse to delete a bridge in the GUI just because its bridge interface doesn't exist, just log that it doesn't exist and don't attempt to ifconfig destroy it, delete it from config

Its long overdue the ez-ipupdate.cache file

Make sure to actually configure the outgoing query interfaces if selected.

Make sure the correct interface is selected once the config has been saved for the DNS forwarder

Make sure the correct interface is selected once the config has been saved. Fixes #3620

Merge pull request #1105 from florian-asche/RELENG_2_1

Update services.inc

fix

Move the IPsec settings from System > Advanced, Misc tab to "Advanced Settings" tab under VPN > IPsec.

Merge pull request #1095 from ExolonDX/unknown branch

Tidy up "maintable.inc" XHTML

Change escaped single quotes to just a single quote

Resolver has no option for remote syslog, remove wrong copy/paste that was adding it when apinger was enabled

Resolver has no option for remote syslog, remove wrong copy/paste that was adding it when apinger was enabled

Merge pull request #1119 from phil-davis/patch-4

Merge pull request #1118 from phil-davis/patch-3

Merge pull request #1104 from ExolonDX/branch_master_04

Merge pull request #1103 from ExolonDX/branch_master_03

Merge pull request #1102 from ExolonDX/branch_master_02

Merge pull request #1101 from ExolonDX/branch_master_01

Merge pull request #1114 from ExolonDX/branch_master_13

Merge pull request #1113 from ExolonDX/branch_master_12

Merge pull request #1112 from ExolonDX/branch_master_11

Merge pull request #1111 from ExolonDX/branch_master_10

Merge pull request #1110 from ExolonDX/branch_master_09

Merge pull request #1109 from ExolonDX/branch_master_08

Merge pull request #1108 from ExolonDX/branch_master_07

Merge pull request #1107 from ExolonDX/branch_master_06

Merge pull request #1106 from ExolonDX/branch_master_05

Merge pull request #1120 from phil-davis/patch-5

Merge pull request #1121 from fegu/patch-1

Fix PBI installation when target lies on different directorie

Update services_dnsmasq.php

Clarified that domain overrides also encompasses subdomains (see https://forum.pfsense.org/index.php?topic=72978.15 for discussion)

fix typo

fix typo

Single quoting $password breaks getting the value from the variable.

No spaces between variable assignments in sh

This doesn't need via-env

Make sure that the DNS Forwarder/Resolver is actually capable of accepting queries on localhost before using it as a DNS server.

Missed pbi_prefix here

Fix PBI symlink creation and deletion under /usr/local following .pbiopt files, also drop setup_library_paths() since it's not necessary anymore

Make sure /usr/local/etc/rc.d exists

On 2.2-ALPHA (i386)built on Mon Apr 21 13:01:11 CDT 2014 (for example) there was /usr/local/etc but not /usr/local/etc/rc.d - when I tried to install bandwidthd, that called write_rcfile() which failed because /usr/local/etc/rc.d did not already exist....

Merge pull request #1116 from PiBa-NL/interface_has_gateway-ipv4_gif_gre

Merge pull request #1115 from PiBa-NL/reply-to_IPv6gateway

Load if_stf module when needed

Cut paste bug fix in Remote Syslog DHCP events

This version for 2.1 branch.
apinger is repeated here from the code above, but it should be dhcp.
Forum https://forum.pfsense.org/index.php?topic=73734.0
Selecting to remote syslog "Gateway Monitor events" would also switch on "DHCP service events" unintentionally.

Cut paste bug fix in Remote Syslog DHCP events

apinger is repeated here from the code above, but it should be dhcp.
Forum https://forum.pfsense.org/index.php?topic=73734.0
Selecting to remote syslog "Gateway Monitor events" would also switch on "DHCP service events" unintentionally.

Add nohttpsforwards option to captive portal

add gre and gif checks for for IPv4 function interface_has_gateway($friendly), like they are already for IPv6

check gateway for IPv6 also for reply-to rules.

Tidy up "services_wol" XHTML

Add SUMMARY to tables
Update HTML Boolean operators
Close INPUT and IMG tags and add ALT to IMG tags
Deprecate ampersand in anchor tags
Move NOWRAP into class statement
Remove empty EM tag

Tidy up "services_snmp" XHTML

Add "closehead" PHP variable and manually close HEAD
Add CDATA section to scripts
Add SUMMARY to tables
Closing INPUT tags
Change "onclick" to lower case
Update HTML Boolean operators
Add missing closing SELECT tag and missing closing TD tag

Tidy up "vpn_pppoe" XHTML

Add SUMMARY to tables
Close IMG tags and and ALT
Move NOWRAP to class statement
Close INPUT tags

Tidy up "services_ntpd_pps" XHTML

Add SUMMARY to tables
Update HTML Boolean operators
Close INPUT tags
Add missing closing DIV, closing TD and closing TR tags

Tidy up "serviecs_ntp_gps" XHTML

Add "closehead" PHP variable and manually close HEAD
Add CDATA section to SCRIPTS
Add SUMMARY to tables
Update HTML Boolean operators
Close INPUT tags
Remove closing anchor tag from INPUT tags
Change "onclick" to lower case

Tidy up "services_ntpd" XHTML

Add "closehead" PHP variable and manually close HEAD
Add CDATA sections to SCRIPTS
Closing IMG tag and add ALT
Change "onclick" to lower case
Add SUMMARY to tables
Close INPUT tags
Update HTML Boolean operators
Remove closing anchor tag from INPUT tag

Tidy up "load_balancer_setting" XHTML

Add SUMMARY to tables
Closing INPUT tags
Add missing closing TD tag

Tidy up "load_balancer_monitor" XHTML

Add SUMMARY to tables
Update PHP shorthamd
Move "fbegin.inc" between BODY and SCRIPT
Add CDATA section to scripts
Close INPUT tags
Update HTML Boolean operators
Add missing opening and closing TD tags
Remove duplicate closing TD tag and add missing closing TR tag

Tidy up "load_balancer_virtual_server" XHTML

Add SUMMARY to tables
Update PHP shorthand
Move "fbegin.inc" inbetween BODY and SCRIPT
Close INPUT tags
Update HTML Boolean operators
Move closing SELECT into the PHP IF statement
Move the "save" and "cancel" buttons into right-hand column

Tidy up "load_balancer_pool" XHTML

Add SUMMARY to tables
Update PHP shorthand
Move "fbegin.inc" include between BODY and SCRIPT
Add CDATA section to scripts
Close INPUT tags
Update HTML Boolean operators
Move SELECT tag into the PHP IF statement

• Added missing usepublicip with dyndnsCheckIP
• Added missing CURL setops

Tidy up "services_igmpproxy" XHTML

Add SUMMARY to tables
Close INPUT and IMG tags and add ALT to IMG tags
Deprecate ampersand in anchor tags
Add CDATA section to scripts
Update HTML Boolean operators
Remove empty TFOOT

Tidy up "services rfc2136" XHTML

Add SUMMARY to tables
Move NOWRAP to class statement
Close INPUT and IMG tags and add ALT to IMG tags
Update HTML Boolean operators
Remove duplicate closing TD tag
Add missing closing TD tag

Tidy up "services_dyndns" XHTML

Add CDATA section to scripts
Add SUMMARY to tables
Move NOWRAP to class statement
Deprecate ampersand
Close INPUT and IMG tags and ALT to IMG tags
Add missing closing P tag
Update HTML Boolean operators
Remove duplicate closing TD tags...

Be smarter at using kenv

Remove problematic code without proper checks but even not needed here

Remove problematic code without proper checks but even not needed here

pfSense - Bug #3607: Fix issue whereby the ICMP6 messages sometimes have the wrong source IP when a monitor gateway has been set.

[pfSense - Bug #3607] Ensure gateway detection can cope with the gateway being a dynamically assigned PPoE interface.

Unload the ZFS module if its not in use to not consume uselss memory

Merge pull request #1096 from fraenki/fix_pbi_services

Merge pull request #1094 from ingenieurmt/master

support symlinked RC scripts from PBI packages

GC unused code and do not set this to 0 for now since it is not anymore relevant

Add missing closing quotes

Correct missing parenthesis. Reported-by: https://forum.pfsense.org/index.php?topic=75120.0

Key off net.inet.carp.demotion and display a warning to the user if the system has self-demoted its CARP status.

Fix text, capitalization, and change wording to put more focus on how the action behaves.

Ensure e-mail address carries over from the CA screen to the Cert screen in the OpenVPN wizard.

Merge pull request #1093 from phil-davis/patch-2

Fix susbstr-substr typo

I just got this error again on 14 Apr 2014 2.2 snapshot. I can see the fix in 2.1 branch. I could have sworn it got fixed in Master also, but I can't see it. So here is the fix for Master.

Merge pull request #1092 from phil-davis/patch-1

Fix bracket type in Log File Size text

Now I am the one with fat fingers (or brain). Somehow I typed a curly bracket opening bracket in this text, but finished it with an ordinary closing bracket.

License Agreement

Insert tracker ids for the default LAN rules

Correct the sense of the check to allow openvpn to work

Correct auth-user-pass-verify to include parameters properly so openvpn can start

Merge pull request #1091 from dv-user1/usort_fix2

Merge pull request #1085 from ExolonDX/branch_master_01

Fixup update URL

fixed a type in usort callback

Use the FreeBSD script for ldconfig to catch all libs

Merge pull request #1088 from phil-davis/patch-11

Unset logfilesize rather than let it be zero

1) When saving Status: System logs: Settings, if the Log File Size field is left blank, it gets cast to (int) and ends pu as zero "0" in config.xml. That breaks the creation of clog files in /etc/rc during boot. /etc/rc expects logfilesize to be unset, blank or a valid integer >= 5120....

Avoid warnings later on if no config for layer7 exists

Get rid of embedded platform. Its time to GC this

Start using filterlog

Switch over to filterlog sooner than later

Unset also here

Unset these globals after use

Merge pull request #1087 from phil-davis/patch-10

Merge pull request #1086 from phil-davis/patch-9

Include static routes in automatic NAT rules display

If I have an internal gateway to other private subnets behind LAN, and add a static route to those private subnets through the internal gateway, then pfSense very nicely generates NAT rules on WAN-style interfaces to NAT those internal subnets on the way out of WAN. That is very good and convenient. This outbound NAT is actually correctly in the ruleset....

Do not allow upgrade_101_to_102 to exit early

This upgrade step does both Captive Portal stuff and OpenVPN stuff. So do not return early just because there is no Captive Portal config.
Both Captive Portal and OpenVPN tests changed to be positive tests, to make sure that everything is checked/tested and there is no chance to return early.

console, reload firewall rules after enabling SSH

Merge pull request #1076 from phil-davis/patch-2

Get real interface when dhcrelay uses default GW

If the DHCP Relay server is not on any local subnet, and not on any subnet that has an internal static route, but is somewhere that no specific route is known, then this code finds the default gateway and uses that in the DHCP relay "-i" parameter. The current code gets just the interface name (like "wan", "opt1"). But DHCP Relay command needs to be fed the actual device name "vr0", "vr1" etc....

Merge pull request #1078 from phil-davis/patch-4

Tidy up XHTML

Update HTML Boolean operator (multiple)
Change ONCLICK to lower case
Add missing semi-colon

Merge pull request #1073 from phil-davis/patch-1

Merge pull request #1072 from marcelloc/patch-3

Merge pull request #1084 from phil-davis/patch-8

Merge pull request #1071 from ExolonDX/master

tls-verify requires quotes around the command to be executed. Ticket #3596

use email from CA creation also as the default for server cert

Fix typo

There is no need to make distinction in kernel anymore since they are the same nowdays and it does the right thing(tm) most of the time

Nowdays there is no real difference between the kernels apart the ZFS support. So do not keep a distinction anymore

console, reload firewall rules after enabling SSH

fixing typo for GIF tunnels to work over IPv6

the call of get_interface_gatewayv6() in the creation of a GIF tunnel over IPv6 leads to a "Fatal error: Call to undefined function get_interface_gatewayv6() in /etc/inc/interfaces.inc on line 934". changeing the function call to get_interface_gateway_v6() fixed it for me on my local system.

fixing typo for GIF tunnels to work over IPv6

the call of get_interface_gatewayv6() in the creation of a GIF tunnel over IPv6 leads to a "Fatal error: Call to undefined function get_interface_gatewayv6() in /etc/inc/interfaces.inc on line 934". changeing the function call to get_interface_gateway_v6() fixed it for me on my local system.

Get real interface when dhcrelay uses default GW

If the DHCP Relay server is not on any local subnet, and not on any subnet that has an internal static route, but is somewhere that no specific route is known, then this code finds the default gateway and uses that in the DHCP relay "-i" parameter. The current code gets just the interface name (like "wan", "opt1"). But DHCP Relay command needs to be fed the actual device name "vr0", "vr1" etc....

Also add similar checks on rc.newwanipv6 as in the v4 version

Also add similar checks on rc.newwanipv6 as in the v4 version

Forgot to remove the problematic part from previous OpenVPN loop fix commit

Forgot to remove the problematic part from previous OpenVPN loop fix commit

Tidy up package signature text

Thought I would tidy this up while coming across it. IMHO "Package settings" reads better than "Packages settings"... and I reworded the explanatory text a bit also.

Take care of the loops reported for OpenVPN in tap mode. Also fixes the problems of tap disappearing from bridge if its a member.

Take care of the loops reported for OpenVPN in tap mode. Also fixes the problems of tap disappearing from bridge if its a member.

tls-verify requires quotes around the command to be executed. Ticket #3596

use email from CA creation also as the default for server cert

Add curly brackets here to improve readability

unset doesn't like @ to silent it, just check if it's set before unset

List GWGs in Interface to send update from

Back-port of this fix done in master https://github.com/pfsense/pfsense/commit/31300a95f71b14dcb98c139388205223a36e8c8b and https://github.com/pfsense/pfsense/commit/8f56dd279432c4fd5a027310622e2650822e4651
Unfortunately this never got back-merged to 2.1 branch. A user on the forum noticed the issue again on 2.1.1 - https://forum.pfsense.org/index.php?topic=74922.0...

fix git path calls and CODIR

it may need some checks/fixes on pkg-utils.inc as git downloads but not installs.

After manual pbi install of git, "pfSsh.php playback gitsync master" works fine with this fix.

Use an alphanumeric test rather than purely is_numericint because the ID is generated by uniqid and is not purely numeric. Fixes #3591

Use an alphanumeric test rather than purely is_numericint because the ID is generated by uniqid and is not purely numeric. Fixes #3591

No pre release this time

Restore old logic and add a @ at unset to silent when it is not set as suggested by Ermal

Make extra sure that we do not start multiple instances of dhcpleases if, for example, the PID is stale/invalid and there is still a running instance.

Bump to 2.1.2-PRERELEASE since 2.1.1 was released

Tidy up "guiconfig.inc" XHTML

Add missing closing SELECT tag