pfSense

check ntp acl only for localhost block

(cherry picked from commit 7faeec0727528d27afbcd1462d5f726985e951e7)

Wait 0.2 seconds after stopping Nginx.
Redmine #10159

(cherry picked from commit 4ddcc5caa393c6478b62b76d7213c2af0c1dde7b)

Merge pull request #4155 from BBcan177/RELENG_2_4_5

Do not allow 'invert match' and 'any' on firewall rules. Fixes #10168

The backend code ignores the invert in this case, and it makes the GUI
render confusingly (!* which could never match anything)

(cherry picked from commit 40baab141eb30b11b57efa0cf14521021aa7b4c7)

Ticket #9612: Reboot early when needed

When fsck -z doesn't work on first attempt due to old binary, reboot
before configure the system to make it faster

Ticket #9612: Prevent infinite loop and skip zfs

• Detect when system does not contain any UFS partitions and skip it to
  run fsck -z
• On a system with a broken filesystem it could end up on an infinite
  loop since fsck -z call would always return != 0. Save a counter on...

Add a few more common ports to list. Fixes #10166

(cherry picked from commit d2c6e89c40b1bff2deb1f0a8847a5199b317ba0f)

Fix #9612: Reboot twice if needed and run fsck -z

After changing pfSense-rc to create /.fix_for_SA-19-10.ufs file to flag
system to run fsck -z during pre-install stage it started failing
because fsck binary, at that point while only kernel was upgraded, still...

Unbound python integration

Unbound python integration