pfSense

Ticket #4235 put reply-to/route-to rules even for mobile-ipsec.

Ticket #4651 Oops correct name of var

Fixes #4651 Assign a proper tracker for NEGATE rules

Fixes #4652 put workaround for bogus timestamp until real data are cosnumed.

Seems strongswan 5.3.0 has improved the situation on putting multiple phase2 on IKEv1 behaviour and it behaves even better with reqid not defined in config.

Revert "Use a dirty hack to make IKEv1 with multiple phase2 to work correctly with one IKE SA for each subnet"

This reverts commit 7d5add01e48bab8d82d5a5699325fa7b6aeb4e5c.

Revert "Provide a description for the dirty hack to not come back scratching.... on it"

This reverts commit 6d7e7c0c5cd8ec613235cd9f2a01f60bb7c32c79.

Fall back to getting local user pages and groups

if the groups could not be found from LDAP and there is a local user.

Provide a description for the dirty hack to not come back scratching.... on it

Use a dirty hack to make IKEv1 with multiple phase2 to work correctly with one IKE SA for each subnet