BSD Commit Log Search

Remove l3 check when passing ARP for authenticated clients

Followup to 604a7b0d4d31e332d6fd4111b22ee29416e0700d.

Clarify EIM-NAT help text

Kea: handle empty binding variables

Followup to 35b7ace2e50e8e9387ae23964a0d18978601e0dd.

Don't clobber Captive Portal pipe reservations. Fix #16540

Keep pipe reservations on reboot for applicable zones. Previously the
pipe reservation file would always be deleted.

Remove all pipe reservations for allowed IP and hostname entries which
have a single direction. Two pipes are always reserved regardless of the
direction setting.

Avoid re-configuring zones during CARP events for unrelated interfaces.

Make sure allowed MAC, IP, and hostname entries are re-added and reserved
when the HA primary switches from BACKUP to MASTER.

Fix parsing of Kea binding-variables

- "pkt.src" needs to be converted.
- "option[24]" is an array but appropriate accessors aren't available.

Prevent removal of vital packages from the GUI. Implement #16538

Ignore config when removing additional packages on factory reset

Introduce helper functions for default system packages

Currently empty.  Can be used to keep a package when the system is
reset, e.g. from Diagnostics > Factory Defaults.

pfPorts: build net/frr10

Test full unbound config when validating new settings

When test_unbound_config() is called, only a partial configuraiton is
tested. It's possible there may be custom options which depend on the
full configuration, e.g. from the Advanced Settings page. Merge the
existing configuraiton with the new settings to ensure a full test.

Reflect correct gateway order after saving. Fix #16495

Also add input validation for the new order.

Use consistent auth log format. Fix #16528

Move get_user_remote_address() and get_user_remote_authsource() to util.inc

These functions are defined in auth.inc and used in config.lib.inc.
Since auth.inc requires config.lib.inc, move the functions to util.inc
which is used by both.

Use the correct pf ridentifier max when deduplicating rule tracker IDs

pf uses uint32 for ridentifier.

Clean username before auth fail log. Fixes #16314

Remove unsupported dh-parameters. Fix #16421

Add log prefix to PHPSESSION logs

Followup to 97c0e52ad9a324d38f9d1763d416de81a6fe4a5e.

Fix stray brackets

Followup to 97c0e52ad9a324d38f9d1763d416de81a6fe4a5e.

Fix configuration artifacts on upgrade. Implement #16253

Remove stray quote

Followup to ae72f1ad8850ea48f07ee2788c2f1f4973d69667.

Correctly parse the optional hostname in rfc3164 logs. Fix #15411

Match a single space after the TIMESTAMP and HOSTNAME header fields as
indicated in the RFC.

Specify the log priority when using /usr/bin/logger

Followup to 97c0e52ad9a324d38f9d1763d416de81a6fe4a5e.

Fix log prefix whitespace

Followup to 97c0e52ad9a324d38f9d1763d416de81a6fe4a5e.

Captive Portal: don't send ARP packets to dummynet. Fix #16264

Dummynet can drop ARP packets and prevent the ARP table from being updated
as expected. Immediately pass the ARP packets for the allowed hosts.

Introduce `endpoint-independent` mapping support for outbound NAT

Fix missing format specifier

Followup to 97c0e52ad9a324d38f9d1763d416de81a6fe4a5e.

Refactor logging to always specify a priority. Implement #16515

New function localize_text():
Helper function to translate user-facing text.

New function logger():
Forces multi-line strings into a single log entry (syslogd is set to split
lines into additional log entries), automatically includes a backtrace for
debug messages, and JSON-encodes applicable log messages.

Deprecate log_error() and log_auth(), update callers with logger().

Consolidate code debug checks into g_get('debug')

Don't call idn_to_ascii,idn_to_utf8 with an empty $domain parameter

Followup to fd0d70702330a5634171ee14ca04beb5425efdea.

Fix format string in French translation of DNS Forwarder. Fixes #14741

* Updated in Zanata
* Exported from Zanata
* pfSense.mo generated with `msgfmt pfSense.po -o pfSense.mo`