(cherry picked from commit 0652bd06)

(cherry picked from commit 8028daee)

(cherry picked from commit 0ddccb7c)

(cherry picked from commit e74f0c2a)
(cherry picked from commit 89ea14d2)

(cherry picked from commit e0bbb0c6)
(cherry picked from commit e053ebc2)
(cherry picked from commit feaf21fc)
(cherry picked from commit bdcdd8b1)

(dnsmasq) add custom port option for domain overrides, closes https://github.com/opnsense/core/issues/799

(cherry picked from commit 36710dce)

(cherry picked from commit f57c0f04)

Kindly pointed out by a generous tester.  Thank you.

(cherry picked from commit 0ce997d0)
(cherry picked from commit 29153230)

(cherry picked from commit 714729af)
(cherry picked from commit 01c41cdc)

(cherry picked from commit ed5c0dde)
(cherry picked from commit b3d14817)
(cherry picked from commit b4329c84)
(cherry picked from commit 294c3801)

The original script is from 2005 and most newer ath(4) drivers do not
even support it.  One can still set the sysctls individually anyway,
it's highly likely you know the hardware when you're trying to set
this up in the first place...

See also: https://wiki.freebsd.org/dev/ath(4)

(cherry picked from commit c8b9eefb)

PR: https://forum.opnsense.org/index.php?topic=3105.0
(cherry picked from commit 9def0e38)

PR: https://forum.opnsense.org/index.php?topic=3092.0
(cherry picked from commit 217c0c9b)

(cherry picked from commit db649ef0)
(cherry picked from commit 210d20f3)

PR: https://forum.opnsense.org/index.php?topic=3083.0
(cherry picked from commit 8a72c970)

(cherry picked from commit 0b31dc52)
(cherry picked from commit 52c7a87c)
(cherry picked from commit 845cb7af)

(cherry picked from commit 619b089c)
(cherry picked from commit d97a1078)

(cherry picked from commit 587720a5)

(cherry picked from commit 6bfb6942)

(cherry picked from commit 631de412)
(cherry picked from commit d879cd91)
(cherry picked from commit 40ac776a)
(cherry picked from commit 02910b50)

(cherry picked from commit ddb33b3f)

(cherry picked from commit 74428f5b)

(trafficshaper) remove unused burst, in freebsd 10.2 it doesn't crash anymore, but doesn't appear to be very useful either. closes https://github.com/opnsense/core/issues/226

(cherry picked from commit f3bdca7d)

(cherry picked from commit 4addfd23)

(cherry picked from commit f34957ec)

Not merging ACL and menu entry yet

(cherry picked from commit bd07877f)
(cherry picked from commit 15b8b918)

PR: https://forum.opnsense.org/index.php?topic=3004
(cherry picked from commit d8f5a12d)

(cherry picked from commit 4497a242)

(cherry picked from commit 0c79cbe4)
(cherry picked from commit 31fe2500)
(cherry picked from commit 8f5bb5e9)
(cherry picked from commit 71bef746)

Not really satisfied with the HA split but let's just say it's a
work in progress...

(cherry picked from commit 16503424)

(cherry picked from commit bb9daf3a)

(IPS) add Add promisc mode / physical interface selection, closes https://github.com/opnsense/core/issues/935

(cherry picked from commit 3bacc745)
(cherry picked from commit 8b4b5bbb)

* optionally collect lagg and vlan parents when the physical device isn't configured yet

(cherry picked from commit 73ce0d60)

(cherry picked from commit 803fd5f5)

(cherry picked from commit eebc4bec)
(cherry picked from commit 92f791e1)
(cherry picked from commit 84152de6)

(cherry picked from commit 2578e763)

(ipsec) cleanup unused ciphers, add null cipher for testing purposes, fix some php warnings on empty arrays

(cherry picked from commit feae22dd)