(cherry picked from commit 8a5b32bf)

IPFW and PF are used for more than just firewall and shaper, e.g.
NAT, policy routing or shaping, and the plugin framework supports
registering multiple user-facing services per file.

(cherry picked from commit 3b34f51f)
(cherry picked from commit ff0dcc4d)
(cherry picked from commit 5e1e138f)
(cherry picked from commit c8cb224b)

(cherry picked from commit 4a6a53bc)

(menusystem) it's ok to link to an item on the page, as long as we don't try to match it back on the server end

(cherry picked from commit d2bd0d52)
(cherry picked from commit 585b643f)

(cherry picked from commit bdb0fac6)

(cherry picked from commit 0a88cca3)

(cherry picked from commit 1583c0a1)

(auth/ldap) disable error reporting on connect, to prevent api to signal authentication errors as issues.

exception 'Exception' with message 'Error at /usr/local/opnsense/mvc/app/library/OPNsense/Auth/LDAP.php:236 - ldap_bind(): Unable to bind to server: Invalid credentials (errno=2)' in /usr/local/opnsense/mvc/app/controllers/OPNsense/Base/ApiControllerBase.php:84
Stack trace:
 0 [internal function]: OPNsense\Base\ApiControllerBase->APIErrorHandler(2,

(cherry picked from commit 3fdb5a93)

(cherry picked from commit 83e21691)

(cherry picked from commit 1a37f39f)

(cherry picked from commit cb0d1842)

.. with either IGMP or FTP proxy.

(cherry picked from commit 44aaac4a)

(crashreport) something seems to trigger Phalcon\Mvc\View->render() before initialize() was called, not sure what it is, probably something changed in phalcon to trigger this in some cases.

exception 'Exception' with message 'The argument is not initialized or iterable()' in phalcon/mvc/view.zep:694
Stack trace:
 0 [internal function]: Phalcon\Mvc\View->_engineRender(Array, 'settings/listRu...', true, true, NULL)
 1 [internal function]: Phalcon\Mvc\View->render('settings', 'listRulesets', Array)
 2 /usr/local/opnsense/www/api.php(26): Phalcon\Mvc\Application->handle()

(cherry picked from commit 32e02ba0)

(cherry picked from commit 5632dfa0)

(cherry picked from commit e7268a99)

Quite some inconsistencies in this function, parameters that can't be set, lack of logic and code duplication.

* removes get_configured_pppoe_server_interfaces(), which can't work anyway... pppoe server interfaces are registered via the plugin itself.
* $dhcpv6ifconf['mode'] can't be set anywhere....
* don't try to revalidate rainterface
* collect "real interface" from dhcpif, shouldn't use carp if
* remove code duplication in dns collection
* move checks up for interface we should skip (when possible)
* RA subnets do not have any backend ties

PR: https://github.com/opnsense/core/issues/1196

(cherry picked from commit 607d8ecc)
(cherry picked from commit b3737522)
(cherry picked from commit 089a3f07)
(cherry picked from commit 89c7a39f)

Credits: https://redmine.pfsense.org/issues/4111
(cherry picked from commit 71275241)

(cherry picked from commit 0080f3f4)

(cherry picked from commit 7cf77968)
(cherry picked from commit 342757b4)
(cherry picked from commit a02b02fa)

(cherry picked from commit 721705d1)

(cherry picked from commit 7b07e6a5)

Some minor tweaks in the file, e.g. we shouldn't use gettext()
for most tings, don't need translations in config files or for
strings that are hardly translatable (OpenVPN).

(cherry picked from commit 33d1edc8)

o consolidate "unbound_" prefix for unbound.inc for pluginification
o services.inc includes unbound.inc rightfully, a bit like a
  plugin would do in the future, but this also means we can
  zap all requires from top pages, which are entirely spurious.
o get_dns_servers() moves to system.inc because it is used by
  status_interfaces.php
o RIP read_hosts()

(cherry picked from commit 715b6367)
(cherry picked from commit cdb0c667)

(cherry picked from commit 18d46de7)

(cherry picked from commit 408ebbef)

(cherry picked from commit a9b8f965)

This was done in early 16.7, seems to work fine so finish the
transition, dnsmasq is next...

(cherry picked from commit 20b39395)

(cherry picked from commit 7c4443a8)

PR: https://forum.opnsense.org/index.php?topic=3884.0
(cherry picked from commit 54c476a9)

192.254 is a legal IPv4 range.
169.254 is the correct private IPv4 address space.
Moved the order of the private address.
(cherry picked from commit 6c87cd42)

(cherry picked from commit bd6c048d)
(cherry picked from commit 438ad5b7)
(cherry picked from commit bd6d928a)
(cherry picked from commit 8ab6fb4c)
(cherry picked from commit 6d2a95ae)
(cherry picked from commit a5e7a055)
(cherry picked from commit d35678f1)
(cherry picked from commit 1c1d4e07)
(cherry picked from commit 505c27c6)
(cherry picked from commit 7ad477ca)