pfSense

The net.inet.ip.fastforward sysctl is retired now.

Tryforward instead, is always on and is compatible with IPSEC.

TAG: tryforward

Apply a different fix to issue #2993.

Instead of forcing the encrypted traffic in transport mode as ENC_AFTER,
just change the mask to allow ENC_BEFORE events.

Theoretically, this eliminate the need of ipsec_transport_filterfix.diff.

Issue: #2993

Remove more references to theme, ticket #5333

Remove config stuff for WEP. on upgrade, disable WEP on interfaces that have it configured and disable those interfaces and generate a notice. Fixes #5123.

Cleanup unused code:

- Remove xmlrpcbaseurl from globals
- Remove xmlrpcpath from globals
- Remove embeddedbootupslice from globals
- Remove call_pfsense_method()
- Remove check_firmware_version()
- Remove get_active_xml_rpc_base_url()
- Remove zeromq.inc...

Disable zero copy buffers in bpf.

This was a no-op before my changes (so this was never really enabled) and
now it is known to cause issues with tcpdump and hostapd.

Disable this until we fix all the raised issues.

Issue: #5257

Remove /usr/share/zoneinfo.tgz and use FreeBSD stock zoneinfo. It fixes #4726

Retire PPTP server, fixes #4226:

- Remove PPTP server and all related code
- Bump config version 12.2
- Write upgrade config code to remove pptpd section and also cleanup
firewall and NAT rules using PPTP interface or src/des

Merge branch 'master' into bootstrap

update config to rid of nt-hash
credit to: das projekt der goatse

Move main pfSense content to src/