pfSense

Fix firewall log dynamic rule lookup master

for rows that are dynamically added as time goes by.
See https://github.com/pfsense/pfsense/pull/2014 for version for RELENG_2_2.

This is theoretically the fix. But due to other issues that mean dynamic updates to not happen at all in 2.3-ALPHA, I haven't been able to actually test it just yet.

It is not necessary manually disable the IPSEC processing when not used.

With the recent IPSEC changes by gnn@, there is no more performance penalty
for 1G networks if you have IPSEC compiled in kernel but not used.

TAG: tryforward

The net.inet.ip.fastforward sysctl is retired now.

Tryforward instead, is always on and is compatible with IPSEC.

TAG: tryforward

Apply a different fix to issue #2993.

Instead of forcing the encrypted traffic in transport mode as ENC_AFTER,
just change the mask to allow ENC_BEFORE events.

Theoretically, this eliminate the need of ipsec_transport_filterfix.diff.

Issue: #2993

Set leftsendcert=always for IKEv2 configurations with certificates to better accommodate OS X and iOS manual configurations. Fixes #5353

Require notices.inc only if it's going to be used

IKE auto mode is back, remove this config upgrade code unsetting it.

Rework the way GUI reads packages tabs, it fixes #5311

Remove more references to theme, ticket #5333

Fix function name, spotted by mgsmith