pfSense

Add hybrid and disabled outbound NAT, fixes #2416:

- Add 2 new outbound NAT modes, hybrid and disabled, manual and advanced
keep working the same way
- Hybrid mode applies manual rules first, automatic after
- Disabled do no create any outbound NAT rules...

Merge pull request #850 from phil-davis/master

Handle comma-separated list of remote networks when making vpn_networks table

Add an option to set no-sync on rules to keep states from being synced via pfsync. Fix #2501

Rework the usage of the shell i/o during stop_packages(), fixes the "Syntax error: bad fd number" for the remaining people who still saw it on shutdown

This tag could be present, but empty. Skip processing if the interface has no IP address.

If the interface is configured and not enabled, bail. We do not need to change settings for disabled interfaces. Fixes #3313

Handle comma-separated list of remote networks when making vpn_networks table

If remote_networks for an OpenVPN instance is a list of more than 1 network then none of the networks gets added to the vpn_networks table. The code simply did not address this new comma-separated list feature. Now it does, and the vpn_networks table contains all the remote networks listed....

Unset this variable used in the loop to avoid having wrong information

Do not forget the trace in the pf.conf that something went wrong during rules generation to be able to at least detect what is going on

Give clients the IPV6 address of the DNS server

For IPV6 WAN tracking interfaces, dhcpdv6 does not provide an IPV6
address for the DNS server... fix that.