(cherry picked from commit abad6f99)

(cherry picked from commit 622e8dba)

(cherry picked from commit 99973edc)
(cherry picked from commit 95158547)

(cherry picked from commit 1be6437c)

(cherry picked from commit 955e1fca)

(cherry picked from commit 669efa5f)
(cherry picked from commit cccec5ab)
(cherry picked from commit a203c699)
(cherry picked from commit c37e82a9)
(cherry picked from commit 25eeb7c9)
(cherry picked from commit e839ef2c)
(cherry picked from commit 587e6573)
(cherry picked from commit 7f76c06c)
(cherry picked from commit 00dfec8a)

(cherry picked from commit 07f5033b)

(cherry picked from commit 1474f77d)

(cherry picked from commit e7137c1e)

(firewall) add port/address parsing to FilterRule(), should be backwards compatible with current config settings

(cherry picked from commit 58b44880)

(cherry picked from commit 51d2acf4)

(proxy) virtualip's should be added automatically for listening configuration, this was the case for some types, but not for all (CARP)

(cherry picked from commit 83488b67)

(cherry picked from commit b0075a6f)
(cherry picked from commit 69f89b04)
(cherry picked from commit e6dccb60)
(cherry picked from commit 4462372b)
(cherry picked from commit 0c096315)
(cherry picked from commit c7ac2083)
(cherry picked from commit ee0e0eae)
(cherry picked from commit eacf920f)
(cherry picked from commit 6ca40bc4)

(cherry picked from commit 067f0982)
(cherry picked from commit 91de2057)
(cherry picked from commit 1df84c3e)
(cherry picked from commit b6a326b6)
(cherry picked from commit 09959a95)
(cherry picked from commit 77f3cfa8)
(cherry picked from commit 517c2cc9)
(cherry picked from commit b08d26db)

(cherry picked from commit 184c79b1)

(cherry picked from commit 5f17abb3)

(cherry picked from commit b990aad6)

* Now fully pluggable and scheduled for core removal in 17.7
* Added IPv6 functionality to IP probe function
* Multiple fixes in the GUI handling
* Separated RFC 2136 backend
* New RFC 2136 widget
* Style consolidation

(cherry picked from commit ce405243)

We have a function pair rrd_import() / rrd_export() now, which do
wildly different things even though they've been used for a single
purpose:

(1) rrd_export() writes a string, appends it to the config.xml

(2) rrd_import() takes a parsed config portion, but not as an
    argument, rather as a global config element

(3) There was also an older backup clue which exported files, but
    simply packed them up for restore after boot

If we can get the system to unify the usage we'll end up with a
neat way of backing, restoring and migrating RRD data, although
I'm not sure if this can be fully compatible with the old files.

(cherry picked from commit c7a488dc)

(cherry picked from commit 802157a3)

PR: https://lists.opnsense.org/pipermail/devel/2017-March/000012.html
(cherry picked from commit 264c5655)

(cherry picked from commit e52e251e)

PR: https://lists.opnsense.org/pipermail/users/2017-March/000062.html
(cherry picked from commit a2381e6c)

(cherry picked from commit 88787945)

The admins group has this now, it makes more sense there as several
people ran into the issue of "my user is admin, but cannot login".

Besides, the privilege sets /bin/csh as the user shell, which we don't
use for root as we have /usr/local/etc/rc.initial there.

(cherry picked from commit 92fab652)
(cherry picked from commit 3a7f8310)

(cherry picked from commit f3c0f74f)

(cherry picked from commit 5ba281e8)

(cherry picked from commit 7504bd00)
(cherry picked from commit 465cd35a)
(cherry picked from commit 867a9a95)

(cherry picked from commit b6c6eec2)

(cherry picked from commit 200bd3ee)
(cherry picked from commit 1464b111)
(cherry picked from commit 8ba7da8f)