pfSense

IPsec multiple identical P1 tunnels input validation improvement. Fixes NG #6010

Kill IPv6 client states on OpenVPN disconnect. Implements #11700

Do not try to display too large PHP_errors.log file. Fixes #11685

Remove unused killall qstats command. Issue #11229

Reroot is safe on ZFS now, so allow it. Fixes NG 6304

Correct IPsec P1 Child SA Start Action validation. Fixes #11576

Add spinning icon to IPsec status wait message

Add IPsec GUI control for Child SA Start Action. Implements #11576

Skip expired DHCP leases for ARP table content. Fixes #11510

Improve Captive Portal redirect URL handling.

• Fix handling of after auth redir URL value so it gets properly
  respected as stated in the GUI. Fixes #11842
• Fix up and optimize the redirect code in general, there were several
  ordering issues (using values before they were set), logic problems,...