pfSense

pass through mac entries should always exist. the reason
for this is because we do not have native mac address filtering
mechanisms. this allows us to filter by mac address easily
and get around this limitation. I consider this a bug in
m0n0wall and pfSense as m0n0wall does not have native mac...

Do not process items if it's not an array.

Remove destination port

Comment out non-working ipv6 nat redirect and mark with a XXX

Trim the label. It sucks to get label too long errors after an upgrade!

Work around the fact that our traffic shaper configuration takes time to create by leaving the carp interfaces in a down state until the very end of bootup.

axe pf captive portal. not sure how this got added back.

handle alias ports correctly

Need a space between keep state and the port

Missing ;