(cherry picked from commit 2155d52f)

(cherry picked from commit 38fc7d4d)

(cherry picked from commit 5a6f5b64)
(cherry picked from commit 8b6108a8)
(cherry picked from commit 8f00c9c7)

(cherry picked from commit bbab5ea3)

(cherry picked from commit 870fcde1)

(ipsec, "save password") change yes -> 1 for 28673. for https://github.com/opnsense/core/issues/1209

(cherry picked from commit 8459b38f)

We don't need 7z anymore, so it's better to use the lightweight package.

(cherry picked from commit 804d915b)

(cherry picked from commit d032a27b)

(cherry picked from commit 34604d5a)

(cherry picked from commit f8645117)

(cherry picked from commit 5365f380)

(cherry picked from commit 0fd14066)

Spotted by: pavelb

(cherry picked from commit c5c1c110)

(cherry picked from commit 6735984b)

PR: https://github.com/opnsense/core/issues/1214

(cherry picked from commit 5dc95bac)
(cherry picked from commit 6eea44ff)

(cherry picked from commit 1d4ca0ff)
(cherry picked from commit 0e03967c)

(cherry picked from commit 407dc8ae)

We can only update from -devel so we do not need this code now.

(cherry picked from commit 9859d51e)

(cherry picked from commit 436a9fa3)

(cherry picked from commit 2a76c4ab)

cleanup in services_dnsmasq_configure, remove duplicate code, for https://github.com/opnsense/core/issues/1182

(cherry picked from commit 52c78955)

It's only partially true and will be compeltely wrong in
the mid-term future.  ;)

(cherry picked from commit 6855a212)

(cherry picked from commit 2d2df026)

(cherry picked from commit c8524059)

(cherry picked from commit 9f315cec)

(cherry picked from commit 57ab36d3)
(cherry picked from commit 76c66b2e)
(cherry picked from commit 6e5f2354)

(openvpn client export) add X-Content-Type-Options: nosniff header, closes https://github.com/opnsense/core/issues/1204

(cherry picked from commit ab3098d6)

(cherry picked from commit 06307f9e)

PR: https://github.com/opnsense/core/issues/1018

(cherry picked from commit b9ff688b)
(cherry picked from commit e98569bb)

PR: https://forum.opnsense.org/index.php?topic=3684
(cherry picked from commit d569a8e1)

The rules edit page can do it, but it was not picked up
by the actual firewall rules...

(cherry picked from commit 3126c616)

(cherry picked from commit 378bc316)
(cherry picked from commit 96f5e7fa)
(cherry picked from commit 50f557f4)
(cherry picked from commit 1fea1163)
(cherry picked from commit 28f3f539)
(cherry picked from commit 12a5ac98)
(cherry picked from commit dc2bd361)
(cherry picked from commit 54cb00d7)
(cherry picked from commit f597fff3)
(cherry picked from commit 481dc9ef)
(cherry picked from commit 30d0c176)
(cherry picked from commit c91304c9)

Fix a few style errors while there.

(cherry picked from commit 63a0231e)
(cherry picked from commit a10382ca)
(cherry picked from commit 79863b19)

(cherry picked from commit c9e40130)

(cherry picked from commit b08d5827)