(cherry picked from commit 408ebbef)

(cherry picked from commit a9b8f965)

This was done in early 16.7, seems to work fine so finish the
transition, dnsmasq is next...

(cherry picked from commit 20b39395)

(cherry picked from commit 7c4443a8)

PR: https://forum.opnsense.org/index.php?topic=3884.0
(cherry picked from commit 54c476a9)

192.254 is a legal IPv4 range.
169.254 is the correct private IPv4 address space.
Moved the order of the private address.
(cherry picked from commit 6c87cd42)

(cherry picked from commit bd6c048d)
(cherry picked from commit 438ad5b7)
(cherry picked from commit bd6d928a)
(cherry picked from commit 8ab6fb4c)
(cherry picked from commit 6d2a95ae)
(cherry picked from commit a5e7a055)
(cherry picked from commit d35678f1)
(cherry picked from commit 1c1d4e07)
(cherry picked from commit 505c27c6)
(cherry picked from commit 7ad477ca)

(cherry picked from commit d0206619)

(cherry picked from commit ec92f844)

(cherry picked from commit c1628bbf)
(cherry picked from commit 3a25b4b7)
(cherry picked from commit 4c253df1)

(cherry picked from commit 78945ce0)

There may be more, at least I don't see the difference between
TLS and shared key for most settings, except certificate setup.

The client traffic redirect is probably also wrong, but for now
provide consistency with TLS.

PR: https://forum.opnsense.org/index.php?topic=3908.0
(cherry picked from commit 6a018ead)

o > 16 hours of randomisation is too much, let cron jobs
  run within 15 minutes.
o Move to `jot' utility for better visibility/portability.
o switch the default bogons invoke to right now, only
  defer the run if `cron' argument was given.

(cherry picked from commit 23530144)

(cherry picked from commit a8bcef6b)
(cherry picked from commit 3486cd2a)

(cherry picked from commit 0cf04fbe)

(cherry picked from commit 72d69220)
(cherry picked from commit dd50e688)

(cherry picked from commit c8c7e364)

(cherry picked from commit 1328c754)

(cherry picked from commit 2d08f304)

Submitted by: @fbrendel

(cherry picked from commit 3cf976cd)

(cherry picked from commit fb99cf44)

(cherry picked from commit 7116568b)

(cherry picked from commit 2dde9b7c)

(cherry picked from commit 593f9b77)

This is the proper way to handle bootup output for the
console: request it and don't output ever time it's called
during boot....

(cherry picked from commit 2c045731)

(cherry picked from commit 65c53e3c)

(cherry picked from commit 74ca8331)

(cherry picked from commit 015c5d00)
(cherry picked from commit a9f41407)

(cherry picked from commit a000c8e0)

(cherry picked from commit 5d60cd1f)

(cherry picked from commit 4590b17d)

(cherry picked from commit e84c86cc)

(cherry picked from commit 8de4047e)

(cherry picked from commit 991678d1)

(hassync) trigger xmlrpc sync before service action, for https://github.com/opnsense/core/issues/1217

(cherry picked from commit 7c82fe62)

PR: https://github.com/opnsense/core/issues/993

(cherry picked from commit 9a0c3839)
(cherry picked from commit edc40978)
(cherry picked from commit 4283c02a)
(cherry picked from commit 850cd7a5)
(cherry picked from commit 8d11de1b)

(ui) add modal form in legacy template to signal the user about pending service action (stop,start,restart)

(cherry picked from commit e14a6b7e)

(crashreport) limit output chunks to 5MB, if we can't find </head> within that area it's very unlikely that it exists in the output.

report:
PHP Fatal error:  Allowed memory size of 268435456 bytes exhausted (tried to allocate 35997807 bytes) in /usr/local/www/csrf/csrf-magic.php on line 144

(cherry picked from commit 2f741d7a)