OPNSense/core 950db02. Makefile

make: fix Python binary name

(cherry picked from commit b7f160e0a2e5bb9b8f0e752f16a593e8311c8186)
DeltaFile
+1-1Makefile
+1-11 files

OPNSense/core c6502d1src/etc/inc filter.inc

filter. outbound nat can be empty in some old configurations, better to check property 
before reading and treat empty as "automatic" (to match the ui presentation). closes 
https://github.com/opnsense/core/issues/3586

(cherry picked from commit c5b41f098eed2727cab8f14afb2d8463b66bcb1c)

OPNSense/core 6b1f3e6src/opnsense/scripts/netflow flowd_aggregate.py

Insight, increase wait time between parses. ref 
https://github.com/opnsense/core/issues/3587

previously we always waited 15 seconds between cycles, now we calculcate the time to wait 
with the time spend for the previous cycle.

OPNSense/core fabaef0src/opnsense/scripts/netflow/lib flowparser.py

Insights, small optimalisation for flowd_aggregate.py, pass last received timestamp to 
flowparser, so we can skip a bit of processing when the data isn't relevant. for 
https://github.com/opnsense/core/issues/3587

OPNSense/core 1e8ebbfsrc/etc/inc/plugins.inc.d ipsec.inc

IPSec, NAT before IPsec changes as discussed 
https://github.com/opnsense/core/issues/1773#issuecomment-513239146

OPNSense/core c5b41f0src/etc/inc filter.inc

filter. outbound nat can be empty in some old configurations, better to check property 
before reading and treat empty as "automatic" (to match the ui presentation). closes 
https://github.com/opnsense/core/issues/3586

OPNSense/core 30a5536src/etc/inc/plugins.inc.d ipsec.inc

IPSec, nat before IPsec, try to work around a current known limitation. ref 
https://github.com/opnsense/core/issues/1773

OPNSense/core b7f160e. Makefile

make: fix Python binary name
DeltaFile
+1-1Makefile
+1-11 files

OPNSense/ports 6a2eea0www/npm pkg-plist distinfo

www/npm: sync with upstream

Taken from: HardenedBSD

OPNSense/ports cd9fef3security/openssh-portable Makefile

security/openssh-portable: sync with upstream

Taken from: HardenedBSD

OPNSense/ports 4b91fd3ftp/curl distinfo Makefile

ftp/curl: partially sync with upstream

Taken from: HardenedBSD

OPNSense/ports 3e9bc06devel/py-mimeparse Makefile

devel/py-mimeparse: sync with upstream

Taken from: HardenedBSD

OPNSense/ports aacaeaedevel/automake Makefile, devel/automake/files patch-bug31222

devel/automake: sync with upstream

Taken from: HardenedBSD

OPNSense/ports 682c3dfdevel/autoconf Makefile, devel/autoconf/files patch-bison

devel/autoconf: sync with upstream

Taken from: HardenedBSD

OPNSense/ports f389ba1audio/qaudiosonar Makefile, audio/sndio Makefile

*/*: sync with upstream

Taken from: HardenedBSD

OPNSense/core afe3c3asrc/etc rc.configure_firmware rc.reload_all, src/etc/inc system.inc

system: break out system_trust_configure()

OPNSense/ports 0da9905ftp/curl Makefile

ftp/curl: same same but different

PR: https://github.com/opnsense/core/issues/3575
DeltaFile
+2-2ftp/curl/Makefile
+2-21 files

OPNSense/core 7b14d1bsrc/etc rc.freebsd

rc: do not use syslog-ng in this section (yet); closes #3577
DeltaFile
+5-2src/etc/rc.freebsd
+5-21 files

OPNSense/ports 5e58a90. UPDATING MOVED, Mk/Uses kde.mk cargo.mk

Framework: partially sync with upstream

Taken from: HardenedBSD

OPNSense/ports 1482f76www/squid distinfo Makefile, www/squid/files patch-src_comm_TcpAcceptor.cc

www/squid: partially sync with upstream

Taken from: HardenedBSD

OPNSense/ports 064579enet-mgmt/prometheus2 pkg-message Makefile

net-mgmt/prometheus2: sync with upstream

Taken from: HardenedBSD

OPNSense/ports f1c1810sysutils/monit distinfo Makefile

sysutils/monit: sync with upstream

Taken from: HardenedBSD

OPNSense/ports 8912d2fsecurity/openconnect distinfo Makefile

security/openconnect: sync with upstream

Taken from: HardenedBSD

OPNSense/ports e831c89security/maltrail pkg-plist Makefile

security/maltrail: sync with upstream

Taken from: HardenedBSD

OPNSense/ports 99bebddarchivers/arj Makefile distinfo

archivers/arj: sync with upstream

Taken from: HardenedBSD

OPNSense/ports 1e0acfdlang/rust Makefile

lang/rust: sync with upstream

Taken from: HardenedBSD
DeltaFile
+23-74lang/rust/Makefile
+23-741 files

OPNSense/ports f9b7334net-mgmt/rtrlib pkg-plist Makefile

net-mgmt/rtrlib: sync with upstream

Taken from: HardenedBSD

OPNSense/ports a989f75devel/libstatgrab Makefile distinfo, devel/libstatgrab/files extra-patch-src_libstatgrab_memory__stats.c

devel/libstatgrab: sync with upstream

Taken from: HardenedBSD

OPNSense/ports 6826f04www/p5-Mojolicious distinfo Makefile

www/p5-Mojolicious: sync with upstream

Taken from: HardenedBSD

OPNSense/ports 20370d1dns/bind914 distinfo Makefile, dns/bind914/files extrapatch-bind-min-override-ttl patch-configure

dns/bind914: sync with upstream

Taken from: HardenedBSD

OPNSense/ports f2f11b1benchmarks/stress-ng distinfo Makefile

benchmarks/stress-ng: sync with upstream

Taken from: HardenedBSD

OPNSense/ports 4210fc5textproc/libxslt distinfo Makefile, textproc/libxslt/files patch-libxslt_documents.c patch-libxslt_imports.c

textproc/libxslt: sync with upstream

Taken from: HardenedBSD

OPNSense/ports 567ddaesecurity/vuxml vuln.xml

security/vuxml: sync with upstream

Taken from: HardenedBSD

OPNSense/ports 8c7722fdatabases/sqlite3 Makefile distinfo

databases/sqlite3: sync with upstream

Taken from: HardenedBSD

OPNSense/ports 140c405devel/google-cloud-cpp pkg-plist, devel/jetbrains-webstorm pkg-plist

*/*: sync with upstream

Taken from: HardenedBSD

OPNSense/core ec904bdsrc/www system_groupmanager.php system_usermanager_addprivs.php

system: fix group priv print and redirect after edit

OPNSense/core 032236fsrc/www firewall_rules.php

filter, rule overview. guess ipproto when not set, closes 
https://github.com/opnsense/core/issues/3581

(cherry picked from commit 7665d2bc7f76700bef5ee3170f2dc5186a1e1395)

OPNSense/core 14fae9fsrc/opnsense/mvc/app/library/OPNsense/Routing Gateways.php

Gateways, empty gateway_group tag in config.xml being parsed in getGroups() results. fix a 
bit of spacing while here. closes https://github.com/opnsense/core/issues/3576

(cherry picked from commit 5dca5cc7238a84a8611becbc48623c8e4646367a)

OPNSense/core c4734acsrc/www system_advanced_sysctl.php

system_advanced_sysctl.php, don't try to translate empty string. closes 
https://github.com/opnsense/core/issues/3578

(cherry picked from commit 7738ac0bb95a75653ecb9c3487d01895fd3340ab)

OPNSense/core ee0cebasrc/opnsense/mvc/app/library/OPNsense/Routing Gateways.php

Gateways, missing dynamic property on stored dynamic items.

(cherry picked from commit 3987cd20972fc7ac766300bece7e40f4b3192600)

OPNSense/core 1e4bf5fsrc/www firewall_rules.php

filter, rules page. html escape dynamic entries to display aliases. ref 
https://github.com/opnsense/core/issues/3581

(cherry picked from commit 8aedc0f0d3ae8e542979fdfadf7a88dbef9f9c72)

OPNSense/core 28e252fsrc/opnsense/mvc/app/library/OPNsense/Routing Gateways.php

Gateways, dynamic generated gateways could duplicate. don't add a "virtual" item when the 
name is already defined in the static config

(cherry picked from commit 2ff5ec429d281ff9eddee00c261c18181d57901a)

OPNSense/core 4964ec6src/etc/inc/plugins.inc.d dpinger.inc

system: scoped IPv6 "%" could confuse mwexecf(), use plain mwexec()

(cherry picked from commit 570227e4d493bee6d9fa0ff4bf55ad35a60c4b4d)

OPNSense/core ea5977bsrc/opnsense/scripts/proxy setup.sh

squid, ssl_crtd is called security_file_certgen in squid 4 it seems, for 
https://github.com/opnsense/core/issues/3584

(cherry picked from commit 981a718da087b37e4a505b0323967a24bc1d40bc)

OPNSense/core 570227esrc/etc/inc/plugins.inc.d dpinger.inc

system: scoped IPv6 "%" could confuse mwexecf(), use plain mwexec()

OPNSense/core 981a718src/opnsense/scripts/proxy setup.sh

squid, ssl_crtd is called security_file_certgen in squid 4 it seems, for 
https://github.com/opnsense/core/issues/3584

OPNSense/core 2ff5ec4src/opnsense/mvc/app/library/OPNsense/Routing Gateways.php

Gateways, dynamic generated gateways could duplicate. don't add a "virtual" item when the 
name is already defined in the static config

OPNSense/core 8aedc0fsrc/www firewall_rules.php

filter, rules page. html escape dynamic entries to display aliases. ref 
https://github.com/opnsense/core/issues/3581

OPNSense/core 3987cd2src/opnsense/mvc/app/library/OPNsense/Routing Gateways.php

Gateways, missing dynamic property on stored dynamic items.

OPNSense/core 9700e4dsrc/etc/inc authgui.inc

forgot one in previous