pfSense/pfsense 8bc76efsrc/etc/inc pfsense-utils.inc

Fix updating renamed aliases with multiple entries

Previous behavior only checked single-entry aliases. This change allows
calling update_alias_names_upon_change() with a spearator to loop
through the alias and update all entries.
DeltaFile
+22-5src/etc/inc/pfsense-utils.inc
+22-51 files

pfSense/pfsense 5379e5csrc/etc/inc upgrade_config.inc

Sync config revision
DeltaFile
+3-0src/etc/inc/upgrade_config.inc
+3-01 files

pfSense/pfsense e4f3b5csrc/usr/local/sbin pppoe-handler

Fix double rc.newwanipv6 execution on if_pppoe

When using if_pppoe and DHCPv6 over the PPP link, both the devd handler script
and dhcp6c execute /etc/rc.newwanipv6 as a result of an address assignment,
which is not fatal but does cause some extra delay as the filter is reloaded and
packages are restarted more than necessary. This is fixed by limiting the
pppoe-handler script to responding to a new IPv6 address only when the logical
interface is not configured for DHCPv6, allowing dhcp6c to manage lease changes
itself. All other IPv6 configurations will generate a ADDR_ADD devd event on
address assignment that is handled by the pppoe-handler script.
DeltaFile
+6-1src/usr/local/sbin/pppoe-handler
+6-11 files

pfSense/pfsense 6cf3e68src/etc/inc syslog.inc

Double-escape HTML characters for use in HTML attribute. Fix #15415
DeltaFile
+1-1src/etc/inc/syslog.inc
+1-11 files

pfSense/pfsense 9c41e11src/usr/local/sbin pppoe-handler

pppoe-handler: Mute spurious invalid address warnings

Move the address checking out of the main body of the script into switch cases
that actually use the address

(cherry picked from commit 51ce224e061a26728bb42d11d238a11bbd989850)
DeltaFile
+9-4src/usr/local/sbin/pppoe-handler
+9-41 files

pfSense/pfsense 0680e73src/etc/inc interfaces.inc, src/usr/local/www interfaces.php

Fix serialization/deserialization of ppp hostuniq and provider attributes

When these two properties were added, the form handling set their config values
to boolean true if empty, leading to empty tags in the config.xml which would be
serialized to the config.cache as empty strings. As a result, later fetches of a
ppp config from the config after the cache is reloaded (i.e. additional
requests) deserialize this true value as an empty string.

However, with the pfnet-controller service running and acting as the config
provider, the raw array written to the config is directly serialized which
would result in hostuniq and provider being stored as and returned as boolean
true rather than the expected empty string, causing a bogus hostuniq and
provider value to be written to the mpd configuration (or passed on to the
if_pppoe ifconfig, as applicable).

To remedy the situation and retain compatibility with config caches that have
the boolean values, interface_pppoe_get_hostuniq(), interface_pppoe_configure(),
and interface_ppps_configure() are changed to check that these attributes are
nonempty as well as string type before attempting to use them. interfaces.php is

    [3 lines not shown]
DeltaFile
+3-3src/etc/inc/interfaces.inc
+0-4src/usr/local/www/interfaces.php
+3-72 files

pfSense/pfsense 30cad81src/etc pfSense-devd.conf, src/etc/inc interfaces.inc

if_pppoe: Resolve endless loop on dhcp6c

When using if_pppoe, the use of ppp-ipv6 to up the pppoe interface on ADDR_ADD
causes a loop of calling interface_dhcp6_configure(), which
restarts dhcp6c, which acquires a lease and assigns an address, which emits an
ADDR_ADD devd event.

Add LINK_UP handling for ifpppoe devices by only executing ppp-ipv6 up, and
remove the execution from pppoe_add_addr.

(cherry picked from commit ebdfb836e5d87d7a663552403b9e3e70cc9594cf)
DeltaFile
+28-5src/etc/inc/interfaces.inc
+7-2src/usr/local/sbin/pppoe-handler
+1-1src/etc/pfSense-devd.conf
+36-83 files

pfSense/pfsense 16eb8e7src/usr/local/www vpn_ipsec.php

Check input validation before prompting to apply settings. Fix #16162
DeltaFile
+1-1src/usr/local/www/vpn_ipsec.php
+1-11 files

pfSense/pfsense 6976e02src/etc rc.newwanipv6

Correct the DNS info change detection. Fix #16170

The variable $dns_changed was introduced along with the RENEW reason and
is intended to only take affect with RENEW. This is done to keep the
original behavior for reasons other than RENEW.
DeltaFile
+5-5src/etc/rc.newwanipv6
+5-51 files

pfSense/pfsense e1ad3c0tools/conf/pfPorts poudriere_bulk

Add collectd to the list of packages to build
DeltaFile
+1-0tools/conf/pfPorts/poudriere_bulk
+1-01 files

pfSense/pfsense 201a899src/usr/local/www system_advanced_firewall.php

Fix IPsec settings filter policy link
DeltaFile
+1-1src/usr/local/www/system_advanced_firewall.php
+1-11 files

pfSense/pfsense 9316ad0src/usr/local/sbin pppoe-handler

Fix config check for if_pppoe

'system/use_mpd5_for_pppoe' is not a valid config path.
DeltaFile
+1-1src/usr/local/sbin/pppoe-handler
+1-11 files

pfSense/pfsense 1c9355bsrc/etc/inc pfsense-utils.inc interfaces.inc, src/usr/local/pfSense/include/www system_advanced_network.inc

Remove the pppoe reset cron job when the interface is disabled or with if_pppoe
DeltaFile
+29-0src/etc/inc/pfsense-utils.inc
+1-0src/usr/local/pfSense/include/www/system_advanced_network.inc
+1-0src/etc/inc/interfaces.inc
+31-03 files

pfSense/pfsense 27e9a8asrc/usr/local/www interfaces.php

Hide unsupported options with if_pppoe. Fix #16155
DeltaFile
+14-2src/usr/local/www/interfaces.php
+14-21 files

pfSense/pfsense 7bfa600src/etc/inc services.inc

Check for Kea custom configuration before retrying without it

Errors without custom configuration can also trigger the notice. In such
case, retrying is redundant and the notice text is misleading.
DeltaFile
+12-4src/etc/inc/services.inc
+12-41 files

pfSense/pfsense 363330dsrc/etc/inc dyndns.class

ddns: use the correct AF for the service type. Fix #16156
DeltaFile
+17-12src/etc/inc/dyndns.class
+17-121 files

pfSense/pfsense 3604a5dsrc/etc/inc services.inc

Use IPv6 system preference for all configured interface types in get_request_source_address()
DeltaFile
+15-6src/etc/inc/services.inc
+15-61 files

pfSense/pfsense 06824b2src/etc/inc interfaces.inc

Correct DHCP6 client log

This function is called regardleass of the "without RA" option. Followup
to dd3d48af87c892a070210f0064e589157868e7c2.
DeltaFile
+1-1src/etc/inc/interfaces.inc
+1-11 files

pfSense/pfsense 5c2c11bsrc/etc rc.newwanipv6

Supress info logs for rc.newwanipv6 RENEW

Only log when there's something to do during RENEW. This avoids spamming
the system log now that rc.newwanipv6 is called on RENEW. While here, also
check that a reason was given before logging it (ppp scripts omit it).
DeltaFile
+15-8src/etc/rc.newwanipv6
+15-81 files

pfSense/pfsense 23ed921src/usr/local/www system.php

Allow deleting login message. Fix #16145
DeltaFile
+2-1src/usr/local/www/system.php
+2-11 files

pfSense/pfsense 209b8basrc/etc/inc config.lib.inc globals.inc

Ensure $rrdtool is set when restoring rrddata. Fixes #16141
DeltaFile
+6-4src/etc/inc/config.lib.inc
+3-1src/etc/inc/globals.inc
+9-52 files

pfSense/pfsense 0c31fc4src/etc/inc shaper.inc, src/usr/local/www firewall_shaper_vinterface.php firewall_shaper.php

Traffic shaper: fix traffic shaper and wizard
DeltaFile
+18-19src/usr/local/www/wizards/traffic_shaper_wizard_multi_all.inc
+18-18src/usr/local/www/wizards/traffic_shaper_wizard_dedicated.inc
+27-0src/etc/inc/shaper.inc
+3-2src/usr/local/www/firewall_shaper_vinterface.php
+3-2src/usr/local/www/firewall_shaper.php
+3-2src/usr/local/www/wizard.php
+72-436 files

pfSense/pfsense d7814a5src/etc rc.backup_logs.sh

Fix exclude path when archiving RAM disk logs

"--exclude" uses a relative path.
DeltaFile
+1-1src/etc/rc.backup_logs.sh
+1-11 files

pfSense/pfsense 1c59b3esrc/etc rc.update_bogons.sh

Improve process_url()

* Fetch plain files only if they've been updated remotely
* Add check for empty file
* Don't falsely log "Could not extract" message
DeltaFile
+13-12src/etc/rc.update_bogons.sh
+13-121 files

pfSense/pfsense 063d171src/etc/inc syslog.inc

Fix syslog config for if_pppoe. Fixes #16127

- if_pppoe section set a filter but did not reset it after, which
  prevented subsequent directives from having other content.
- if_pppoe section did not have a blank line after, which broke
  itself and the next directive if any directives came after.
DeltaFile
+2-0src/etc/inc/syslog.inc
+2-01 files

pfSense/pfsense 886b66fsrc/usr/local/pfSense/include/www firewall_nat.inc

Limit port forward overlap checks to the same IP address family. Fix #16130
DeltaFile
+3-0src/usr/local/pfSense/include/www/firewall_nat.inc
+3-01 files

pfSense/pfsense 2018beasrc/etc rc.update_bogons.sh

Check for expected file extension before extracting the file. Fix #16129

This regressed with 5a7a1a84dd8703f866257e70818bfce0ac6db9d3.
DeltaFile
+9-1src/etc/rc.update_bogons.sh
+9-11 files

pfSense/pfsense 010b97asrc/usr/local/www status_captiveportal.php

Update Status > Captive Portal with correct config path. Fix #16126

While there, show the zone description as well.
DeltaFile
+1-1src/usr/local/www/status_captiveportal.php
+1-11 files

pfSense/pfsense 9be1770src/etc/inc dyndns.class

dyndns: add some error handling
DeltaFile
+5-5src/etc/inc/dyndns.class
+5-51 files

pfSense/pfsense 823a344src/etc/inc syslog.inc

Omit matched rule from associated rules in firewall logs

Followup to 738d2703ec4f483ea2d5038d4d6faa2f26a921b2.
DeltaFile
+15-18src/etc/inc/syslog.inc
+15-181 files