XHTML Compliance

Firewall - NAT - Outbound - Edit
Ticket #3484 Note that for now prefixlen is useless in ipv6 tunnels. IPv4 accepts them
Merge pull request #983 from N0YB/RELENG_2_1

XHTML Compliance
Fixes #3484. Provide a dynamic gateway for gif v6 tunnels so it can be used on firewall rules etc. The guide for setting up this tunnels on docs need to change to leave the gif interface as none type. People upgrading need to fix this themselves with a not on release notes. This can be fixed if the kernel condition is relaxed to allow setting the prefixlen on the tunnel as ipv4
Ticket #3484 Correct the case for GRE tunnels as well since they behave the same. GRE seems to need the prefixlen 128 specified all the time so do it explicitly to be on safe side
Add a file flag to trigger the forced serial or else we may miss it during a firmware update and still end up with an accidentally disabled port.
Add an option to verify peers_identifier when it's ASN.1 distinguished name. It should fix #2904
XHTML Compliance

Firewall - NAT - Npt - Edit
Merge pull request #987 from N0YB/RELENG_2_1

XHTML Compliance
XHTML Compliance

Firewall - Aliases - Edit
Merge pull request #988 from N0YB/RELENG_2_1

XHTML Compliance
XHTML Compliance

Firewall - Schedules - Edit
Merge pull request #989 from N0YB/RELENG_2_1

XHTML Compliance
Wrap this in an is_array() test, or else if you have no manually configured DNS servers, saving the DHCP settings produces a PHP error.
sync up ALTQ-capable interfaces list