(cherry picked from commit 8ebc1223)

(cherry picked from commit 99c71c85)
(cherry picked from commit 9d73770c)

(cherry picked from commit 25d38d96)

We import those users with a random password.  We can always let
the admin define another one and use it... And provide a way to
set a random password back in case that is required again.

PR: https://github.com/opnsense/core/issues/1351

(cherry picked from commit 32f78562)
(cherry picked from commit 66d982fd)
(cherry picked from commit eff961d5)

(cherry picked from commit b3ed2232)

(cherry picked from commit f07ab5fa)
(cherry picked from commit 189ae898)
(cherry picked from commit f6014c36)

PR: https://github.com/opnsense/core/issues/1359

(cherry picked from commit fc3fcf8a)
(cherry picked from commit 53bf7022)
(cherry picked from commit 597adf4f)
(cherry picked from commit bf1e663a)
(cherry picked from commit d63442d5)
(cherry picked from commit 9073176f)
(cherry picked from commit 6ba6098b)
(cherry picked from commit 367d2e20)
(cherry picked from commit 7b6ab769)
(cherry picked from commit 1f3458ec)
(cherry picked from commit 540f537a)
(cherry picked from commit 4f3239c7)

make the ipv4 subnet matching code work like the ipv6 code, fixes bug in subnet matching on tun interfaces

(cherry picked from commit 07d2354a)
(cherry picked from commit b3bad8d2)

PR: https://github.com/opnsense/core/issues/1393

(cherry picked from commit 212fd9aa)
(cherry picked from commit 71bc4cb3)
(cherry picked from commit 0327622c)

(cherry picked from commit 734de5e8)
(cherry picked from commit 4462372b)

(cherry picked from commit 46fb7015)

PR: https://github.com/opnsense/core/issues/1377

(cherry picked from commit 85c00a53)
(cherry picked from commit 324bd755)
(cherry picked from commit 0d104a9d)
(cherry picked from commit a7ef4192)
(cherry picked from commit 76068737)

(cherry picked from commit 27f3a1be)
(cherry picked from commit 2c17a0f7)
(cherry picked from commit 6e5dfc36)

(cherry picked from commit 4b5c80b9)

(cherry picked from commit 81387849)

PR: https://forum.opnsense.org/index.php?topic=4477.0
(cherry picked from commit 714bd18c)

(cherry picked from commit 46e132f8)
(cherry picked from commit 77dedce0)

(cherry picked from commit 70c502ba)

Bring back parts of f9e71141 in order to do an autoremove on
minor operations.  We still don't want the cleanup, but at
least since we have migrated to the vital flag we can be
sure that our GUI is not being purged.

(cherry picked from commit 75048a5a)

(cherry picked from commit a0689d4f)

PR: https://github.com/opnsense/core/pull/1388

(cherry picked from commit ba90a39f)

(cherry picked from commit a291ec24)

(cherry picked from commit c1dc9431)
(cherry picked from commit 1ccd6158)
(cherry picked from commit 01ef1930)
(cherry picked from commit 78e26579)
(cherry picked from commit f12e4e4b)

(cherry picked from commit 26c99a97)

(cherry picked from commit cb686a6a)

(cherry picked from commit c92fb905)

(cherry picked from commit f44a60f9)

openvpn export, advancedoptions shouldn't be escaped https://forum.opnsense.org/index.php?topic=4427.msg16748#msg16748

(cherry picked from commit 012d0b90)

(cherry picked from commit d4cf6d17)

(cherry picked from commit c0cb9dbc)

(cherry picked from commit e574dcc6)

(cherry picked from commit 7f230df7)

(cherry picked from commit 168393a4)

(cherry picked from commit 895e30d1)

(cherry picked from commit f20640d0)

dhcrelay: change the description and help text to make it clear multiple servers are supported (#1360)

* dhcrelay: change the description and help text to make it clear multiple servers are supported

* dhcrelay: minor spelling errors

(cherry picked from commit 60b48f01)

isset() vs !empty(), when the legacy code stores false.... it eventually translates into a missing entry after save, before save, it's set with false....

(cherry picked from commit 3a96c1dd)
(cherry picked from commit e77d568e)

(cherry picked from commit 0dc512ee)

(cherry picked from commit 593d7525)