pfSense

passive should always be on for mobile clients per racoon man page

Reorder where inetd gets started to after where the package rules are generated, so that a package can add a line to inetd.conf using that process.

If we have deleted the last cert from the CRL, blank out the text.

Ticket #CZH-831780. If gif(4) is part of a bridge and its mtu is smaller than 1500(ethernet standard) do not consider it in finding the smaller mtu because we have a patch to allow gif(4) be member of a bridge with smaller mtu. See https://rcs.pfsense.org/projects/pfsense-tools/repos/mainline/commits/67d3135722db4a3c911761ead5c881ccaef02c65 for details.

Timeout is either a global option and/or a table stanza option. For now made it a global option.
For the future each pool should probably have a configurable timeout.

Fixes #1394. Create a function get_itnerface_default_mtu and use it for resetting the mtu of a interface to default when needed. This adds the overhead of fetching the interface mtu and comparing with the default one every interface configuration run.

Disable this log message, as it can be extremely spammy in the logs.

Some more whitespace fixes.

Use correct config variable and fix some whitespaces.

Give time to filterdns to exit gracefully and after that start a new process.