added simple shorewall whitebox test (close #5649)
openvpn server config: script-security should be "1", since we don't need "2"; add tcp-nodelay to tcp servers.
Revert "update cipher configuration for openvpn to use the IANA name"

This reverts commit ae50675e9095750cee9810237fb6b9f60030dae4.

Older openssl implementations (wheezy, android, others) aren't able to
parse this newer string, so reverting to the deprecated name until we
are sure the support is there
use hash for provider service levels

We want to access service levels by means of the id stored in the user record. With a hash we don't have to loop through all elements to find the one with a given id and still can use arbitrary strings and do not rely on the order of the array.

Also it's the format the webapp is expecting right now.
revert accidental change to webapp config template
change rsyslog pin from leaps debian repo to backports (fixes #5533)
fixes #5533 and updates rsyslog Merge branch 'rsyslog_backport' into develop
static: pin amber version to 0.3.0
fix bug with empty tor families