Submitted by: Jakob Strebel
Edited by: franco@

(proxy) add transparant proxy option to squid including a template for the firewall_nat rules to forward traffic to it

(legacy/ldap) allow local users to be created with random password, solves errors in log when linking groups and leaves the possibility open to allow shell login using ldap in a later stage (currently not supported)

for example, if squid needs some directories to exists before initial run after boot, it could set this in /etc/rc.d.conf/squid

squid_opnsense_bootup_run="/usr/local/opnsense/scripts/proxy/setup.sh"

which effectively results in setup.sh being started followed by the normal service squid start

disadvantage of this, both the service template and the rc system needed to be aware of the setup.
advantage, all services which don't need special preperation are configured as they would be on normal FreeBSD

`block quick' creates a chain-reaction that requires `pass quick' for
loopback traffic, even though we have non-quick loopback pass rules
below.  If `quick' ought to be used, non-quick should be removed
completely, but that is beyond the scope of this fix.

For now, rather pass all IPv6 traffic on the looback device as opposed
to passing all IPv6 traffic with an IPv6 loopback address.

While blocking IPv6 in this case is a good start, loopback traffic
from internal to internal should never be blocked as some deamons
like squid use it to probe and/or communicate.

add fr_FR.po

o Makes live-mounting easier as the package config samples won't
  be clobbered anymore.

o Automatically picks up ".in" files, runs replace and moves them
  to their permanent location.

o Refactored src directory install while at it.

minor LDAP fixes

ldap: add describtion (full name) during import of a user

(proxy) add option to ignore subnets from getting into the access log (https://github.com/opnsense/core/issues/287)

As an added benefit, (default) will now always revert back to the
actual default from the sample configuration, which is exactly
how it should be.