(cherry picked from commit d032a27b)

(cherry picked from commit 34604d5a)

(cherry picked from commit f8645117)

(cherry picked from commit 5365f380)

(cherry picked from commit 0fd14066)

Spotted by: pavelb

(cherry picked from commit c5c1c110)

(cherry picked from commit 6735984b)

PR: https://github.com/opnsense/core/issues/1214

(cherry picked from commit 5dc95bac)
(cherry picked from commit 6eea44ff)

(cherry picked from commit 1d4ca0ff)
(cherry picked from commit 0e03967c)

(cherry picked from commit 407dc8ae)

We can only update from -devel so we do not need this code now.

(cherry picked from commit 9859d51e)

(cherry picked from commit 436a9fa3)

(cherry picked from commit 2a76c4ab)

cleanup in services_dnsmasq_configure, remove duplicate code, for https://github.com/opnsense/core/issues/1182

(cherry picked from commit 52c78955)

It's only partially true and will be compeltely wrong in
the mid-term future.  ;)

(cherry picked from commit 6855a212)

(cherry picked from commit 2d2df026)

(cherry picked from commit c8524059)

(cherry picked from commit 9f315cec)

(cherry picked from commit 57ab36d3)
(cherry picked from commit 76c66b2e)
(cherry picked from commit 6e5f2354)

(openvpn client export) add X-Content-Type-Options: nosniff header, closes https://github.com/opnsense/core/issues/1204

(cherry picked from commit ab3098d6)

(cherry picked from commit 06307f9e)

PR: https://github.com/opnsense/core/issues/1018

(cherry picked from commit b9ff688b)
(cherry picked from commit e98569bb)

PR: https://forum.opnsense.org/index.php?topic=3684
(cherry picked from commit d569a8e1)

The rules edit page can do it, but it was not picked up
by the actual firewall rules...

(cherry picked from commit 3126c616)

(cherry picked from commit 378bc316)
(cherry picked from commit 96f5e7fa)
(cherry picked from commit 50f557f4)
(cherry picked from commit 1fea1163)
(cherry picked from commit 28f3f539)
(cherry picked from commit 12a5ac98)
(cherry picked from commit dc2bd361)
(cherry picked from commit 54cb00d7)
(cherry picked from commit f597fff3)
(cherry picked from commit 481dc9ef)
(cherry picked from commit 30d0c176)
(cherry picked from commit c91304c9)

Fix a few style errors while there.

(cherry picked from commit 63a0231e)
(cherry picked from commit a10382ca)
(cherry picked from commit 79863b19)

(cherry picked from commit c9e40130)

(cherry picked from commit b08d5827)

PR: https://github.com/opnsense/core/issues/1189

(cherry picked from commit 0fb1cb1d)
(cherry picked from commit e52b51f5)
(cherry picked from commit 98ed70d8)
(cherry picked from commit 0760c967)

(cherry picked from commit 5120905f)
(cherry picked from commit 3b54d298)
(cherry picked from commit 73f61f06)

The file came from Scott Dale in 2007 like some of the others.
While there, also fix Deciso update from 2014->2016 in our tree.

See: https://github.com/pfsense/pfsense/commit/ab6a5cfc

(cherry picked from commit 5344b423)
(cherry picked from commit ca61acd3)

Same same, but different. (See previous commit for details.)

o Human-readable format of authentication method in overview
o Refine behaviour of enable / apply on main IPsec page
o Dedup leftsubnet/rightsubnet for meshed IKEv2
o More elegant interface and service plugging
o Tunnel isolation mode for IKEv2 (unmashed)
o Cleanup pass over backend code
o Allow Camellia for IKEv2
o Allow %any in phase 1
o Allow EAP-MSCHAPV2

Since the changes are splattered over several commits already
taken apart by other cherry-picks, just sync the files that
have not had their changes moved to stable/16.7 yet.

o Adapt to cipher output changes in OpenVPN 2.1.12
o Improve plugin probing for virtual interface
o Added missing IPv6 Tunnel Network for CSC

While here, remove the RAM disk mention, we can cope with this now.

(cherry picked from commit f85f3566)
(cherry picked from commit 02f9143e)
(cherry picked from commit 47988b58)

(cherry picked from commit 5ad7adc6)