(cherry picked from commit 9503d722)
(cherry picked from commit 69e28f84)
(cherry picked from commit 0cd0c895)
(cherry picked from commit 1334374b)
(cherry picked from commit d27cdb43)
(cherry picked from commit 2f5468ae)

(cherry picked from commit 1ccf6b45)

(cherry picked from commit d3d583ab)

Suggested by: @fabianfrz

(cherry picked from commit b218ce7d)

(cherry picked from commit a85a46b8)
(cherry picked from commit d7319957)

Suggested by: SimonB

(cherry picked from commit c6d2cca0)

There is no need to visually overload the field descriptions with
stop chars like a slash, the help is sufficient in explaining that
multiple networks can be used and the chances are high that most
will only ever use one network here.

(cherry picked from commit 1611955b)

Suggested by: SimonB via Pootle

(cherry picked from commit db356ac9)

(cherry picked from commit a94af0da)

Suggested by: @Antonio-Prado

(cherry picked from commit 7f9fcfb2)

(cherry picked from commit b56bcf83)

(cherry picked from commit ca1270a8)

(crashreport) PHP Warning:  in_array() expects parameter 2 to be array, null given in /usr/local/www/vpn_openvpn_csc.php on line 406

(cherry picked from commit d26cbd66)

(crashreport) PHP Warning:  in_array() expects parameter 2 to be array, null given in /usr/local/www/services_unbound.php on line 176

(cherry picked from commit 801d7ca0)

(packet capture) limit the maximum number of output lines, prevent "PHP Fatal error:  Allowed memory size of ..."

collected from crashreport

(cherry picked from commit aab13817)

(crashreport) PHP Warning:  Illegal string offset 'rule' in /usr/local/www/diag_logs_filter.php on line 277

(cherry picked from commit 64f3742f)
(cherry picked from commit 8f243538)

Revert "(ids) style fix", https://github.com/opnsense/core/commit/aaa0ddafe1179cebc68146bdc3c30b8b90c564b8 can cause "Allowed memory size of ... bytes exhausted", better to set a sane default max here.

This reverts commit aaa0ddaf.

(cherry picked from commit ed4c923c)
(cherry picked from commit f4e6e6f4)

(cherry picked from commit 4461ea23)

(cherry picked from commit cc18336d)
(cherry picked from commit cdf05735)

(cherry picked from commit 0be295ac)

Eventually we should move this kind of "get all attached networks" to a single and simple function, which uses legacy_get_interface_addresses() underneath. but there's still too much obscure code in this region to remove it easily

(cherry picked from commit 86996d7b)

(cherry picked from commit 65653b7c)
(cherry picked from commit 0e158f0b)

While there also get rid of the need for a /usr/ports dir (this will
make tools.git crash and burn for sure.)

shadow.ucl adapted from https://github.com/freebsd/freebsd-ports/blob/master/Keywords/sample.ucl

(cherry picked from commit 82bece2a)
(cherry picked from commit 73e58543)

We don't have to do anything here anymore.  Since we started using
pkg(8) the extensions.ini was always consistent, but we needed to
make sure that the order is correct.  Some more cleverness was added
to no prevent other PHP modules from simply "plugging in", but since
they are not in one extensions.ini anymore it won't matter.

Expecting some splatter during upgrade, but hopefully also no more
php-suhosin clashes with php56-session not loaded.  :)

(cherry picked from commit 706d2804)
(cherry picked from commit bd66467d)

(cherry picked from commit 0cdd609e)

(cherry picked from commit f107116e)

(cherry picked from commit 6f503e56)

(cherry picked from commit 652089dd)

(cherry picked from commit 35ec2adc)
(cherry picked from commit f52dd530)
(cherry picked from commit 54ec6487)

(cherry picked from commit ed4a3335)

This looks simple enough now.  Discussed with @adschellevis.

(cherry picked from commit 1d73b3b5)
(cherry picked from commit ab4f67c8)
(cherry picked from commit 47c3fee7)
(cherry picked from commit 3947fff4)

(cherry picked from commit 5585e109)

Now always restore from a full backup only, the standard has already
been switched in the scope of this ticket a while back.  The section
restore could be improved, but it's not really worth doing this in
the old code anymore.  Hopefully the last change of its kind here.

(cherry picked from commit 14fabe46)
(cherry picked from commit 0dad9094)
(cherry picked from commit e3196586)
(cherry picked from commit 96820738)
(cherry picked from commit d3c7d74c)

(cherry picked from commit f96a3fc0)
(cherry picked from commit ab5cb92d)

(cherry picked from commit bcd96a58)

Also see: http://www.openssh.com/txt/release-7.0

(cherry picked from commit 4870ff10)

Prefer LiveCD boot during install media boot, then
set up an extra user for installation.  This user
shall be reached via console or SSH soon enough for
a sort of remote install experience.

PR: https://forum.opnsense.org/index.php?topic=3403

Inspired by: DragonFlyBSD (and we're using its installer anyway!)

(cherry picked from commit 710f00e8)
(cherry picked from commit 8ea003a0)
(cherry picked from commit bde361f7)
(cherry picked from commit d4ecff6f)
(cherry picked from commit 557e7271)
(cherry picked from commit 738f733d)

(cherry picked from commit 5ec2101a)
(cherry picked from commit b0aeb04b)

(cherry picked from commit 571bc8c9)
(cherry picked from commit 75e4f8ee)
(cherry picked from commit 9a557bdf)