Handle comma-separated list of remote networks when making vpn_networks table

If remote_networks for an OpenVPN instance is a list of more than 1 network then none of the networks gets added to the vpn_networks table. The code simply did not address this new comma-separated list feature. Now it does, and the vpn_networks table contains all the remote networks listed.
Related to forum thread: http://forum.pfsense.org/index.php/topic,66776.msg377169.html#msg377169
and bug report #3309 - but from the bug report, there might be some other issue to be addressed also.
Add an option to set no-sync on rules to keep states from being synced via pfsync. Fix #2501
Merge pull request #850 from phil-davis/master

Handle comma-separated list of remote networks when making vpn_networks table
Fix indent, whitespaces and a close a couple of unbalanced tags
local_sync_accounts: provides empty STDIN to pw userdel command

The /usr/sbin/pw command may wait for user input. For example,
if there is a manual crontab settings for :foobar account, then
when this account is requested to be deleted, the command will
ask if user wants to delete crontab settings for the account.

Because the command waits for user input, the boot process will
hang at the "Synchronizing user settings..." step, unless user
presses any key.

To avoid this problem, we use the /bin/echo command to give
empty input for /usr/bin/pw command. This is an alternative of
typing "no" or "n".

This is a not the best way. Maybe closing STDIN is good. Or
force users to change account settings from webUI.

See also #852 (pull request). Renato Botelho points out that
"pw userdel" will call "crontab -u %user -r" that is interative.
"pw groupdel" will never be interative, though.
Fix whitespaces and indent
Add hybrid and disabled outbound NAT, fixes #2416:

- Add 2 new outbound NAT modes, hybrid and disabled, manual and advanced
  keep working the same way
- Hybrid mode applies manual rules first, automatic after
- Disabled do no create any outbound NAT rules
- Remove ipsecpassthru config field and rename advancedoutbound to
  outbound
- Save mode on $config['nat']['outbound']['mode'] to simplify the logic
- Modify config.default to reflect changes
- Add code to upgrade config, and change latest_version to 10.3
- Use html to align modes and remove some hacks to align using &nbsp;
Merge pull request #854 from icyfork/provides_empty_STDIN_to_pw_command

local_sync_accounts: provides empty STDIN to pw userdel command
Remove unused variables and fix automatic nat to alias-address
Tidy up the "Helper Icons"

The "Helper Icons" at the top right of some service pages at present
produces 30+ HTML errors/warnings, this is due to the table cell being
wrapped in a span statement then in a div statement, table cells can
only be part of a table row then within a table statement.

- remove the table cell definitions from /etc/inc/service-utils.inc
- add the table cell definition from /etc/inc/service-utils.inc to
/usr/local/www/status_services.php and add some logic to determine if
the service is running which will then determine which class statement
to use and pad the icon with a space
- apply the same table cell definition and logic as above to
/usr/local/www/widgets/widgets/services_status.widget.php
Tidy up "interface_statistics.widget.php"

Remove padding surrounding the main table, makes the widget have the
same "look and feel" as the other widgets.
Split automatic to nat hosts fill into a function to be able to call it from other place, ticket #2416
Show advanced outbound rules and inform user what are being used and what are being ignored. It should fix #2416
Merge pull request #856 from ExolonDX/branch_02

Tidy up "interface_statistics.widget.php"
Revert "local_sync_accounts: provides empty STDIN to pw userdel command"

This reverts commit c6b156bfa537754d079868653ef3561eb1330d8c.
Provide a more safe way to avoid pw userdel being interactive because of a crontab existance
Move automatic rules to a separate table, ticket #2416
Added support for City Network to Dynamic DNS.

City Network is a Swedish web hosting company.
They provide a dynamic DNS service for their customers.
This service uses the dyndns2 protocol.
Merge pull request #855 from ExolonDX/branch_01

Tidy up the "Helper Icons"
Many fixes on privileges, ticket #3216:

- Rename some privileges:
   page-diag-system-activity => page-diagnostics-system-activity
   page-interfacess-groups => page-interfaces-groups
   page-interfacess-lagg => page-interfaces-lagg
   page-interfacess-qinq => page-interfaces-qinq
- Write an upgrade function to replace above privileges by the new name
- Remove unused privilege page-diagnostics-logs-wireless
- Remove duplicated privileges
- Fix limiter-info, pf-info and system-pftop that were using wrong name
- Add privs for edit pages (interfaces_groups, interfaces_lagg,
  interfaces_qinq and services-igmpproxy)
- Fix ID for acptiveportal allowedhostnames and editallowedhostnames
- Fix some wrong matches