ids.cgi fix snort rules download url.

fixes: 10579
ddns.cgi: Fix token auth for provider regfish.com.

In the past the regfish.com auth token was stored as username similar than freedns.afraid.com. We now expected
the token key stored as password, to keep compatiblity with old installations I've added some compatible code
to prevent users from various issues.
ddns.cgi: Check for valid FQDN before doing nslookup.

We now check if the used hostname is a valid FQDN before doing the nslookup to
determine if a DDNS host is up do date.
tor: Update to 0.2.4.23

http://www.heise.de/security/meldung/Erfolgreicher-Angriff-auf-Tor-Anonymisierung-2278774.html
OpenVPN: Added a check for empty 'CERT_NAME' field.

Fixes: #10581
firewall: add more pscan matches and filter INVALID conntrack packages.
ddns: Update to 004.
ddns.cgi: Fix enable/disable handling of entries.

When the "enabled" checkbox is checked a "on" will be returned,
if the box is unchecked checkboxes will return nothing.

As a result of this behaviour the ddns.conf contained entries which have been disabled in the WUI.

We now check if the checkbox returns a "on", otherwise we will set the "enabled" value to "off" to
prevent from this problem.
lzo: Downgrade to 2.0.6 (CVE-2014-4607 patched).

openvpn fails at lzo_init with lzo-2.07 and 2.08 on armv5tel.
Merge branch 'master' of git.ipfire.org:/pub/git/ipfire-2.x
Merge remote-tracking branch 'morlix/check_mk'
check_mk_agent: Bump release version to 4.
check_mk_agent: extract backup include before uninstall.
ddns: rootfile update.
openssl: update to 1.0.1i.
core81: add changes to core81 updater.
ddns.cgi: Allow enabling/disabling entries.
ddns.cgi: Fix coding style.
ddns.cgi: Fix CGI clearing all settings.
ddns.cgi: Support hostname details without seperating dots.

To keep compatiblity with the settings file of the old DDNS update script
(setddns.pl) we keept the storrage of the hostname information in
two parts (hostname and domain) and connected both with a dot to get a valid
FQDN again. OpenDNS and may some other providers do not use a dotted format
for this information, so one of these two values were empty.

We now can handle such cases in a right way.