pfSense

Don't always toggle display of advanced options. Fix #16330

Allow disabling logging of packets blocked due to unmatched IP options. Implement #460345

Ignore link-local IPv6 address from PPPoE DEVD events

Returns the behavior of ignoring LL addresses. The LL fallback is no
longer needed since the IPv6 peer address is now always included.

Followup to a0baea958c7fae9363c757317e9d52874a257b70

Always include the IPv6 peer address if available

Also include the scope with LL addresses for the IPv6 peer address.

Followup to 7948ab35f8becd96ee15cc06f60bf51339e7a44b

Fix negated rules again

Followup to c8e1e75d56a3c01628c535f49f556b6242ee4712

Fix negated rules

Regression from 82db67f6a2e09658892f1f68c3c18e5621ff5c9f

Consider gateway group VIP preference with DDNS. Fix #16326

Refactor rule labels. Implement #16325

- Define labels as key/value pairs.
- Add new functions to handle labels defined in config.xml rules.
- Support generating unique labels for pf rules from the respective
config.xml rules when possible; namely NAT rules cannot have labels....

Also check the pf config file when checking if a filter reload is needed

This serves to keep the pf config file in an expected state in case it was
modified by some other method.

Followup to d8f4932a4d91794c76a02c2fb0a8209a92fa478b

unbound: remove sock-queue-timeout until supported upstream. Fixes #16299