pfSense

Print a warning on the login screen if you are accessing the router by a non-local IP address (one not configured on the system) to warn about potential MITM attacks.

Bypass the DNS Rebind attack checks if accessing by IP address.

Add some user cert lookup functions.

Allow importing of a CA's private key (optionally).

duplicate logic

Allow forwarded domains to be queried.

Check for locally configured IPs in DNS rebind checks, so people who port forward from WAN to the LAN IP can still work.

Add a text box where someone can enter in alternate hostnames for the system to bypass the DNS rebind checks.

Add a checkbox to disable DNS rebinding checks if needed.

Remove extra }