Don't include link-locals as unbound interface candidates

Unbound does not presently support link-local interfaces.
replace spaces with tabs
After discussion with Ermal, remove this to force consumers to send things
properly. I fixed the scenario in Unbound where it was sending IPs to
these functions rather than an interface, so this has no functional diff.
The time has come - bump to 2.2-RC
Merge pull request #1365 from jean-m-cyr/master
Proper CA certificates are in place to validate SSL in these cases where it previously couldn't be, remove disabling of verification.
Don't try to launch 3gstats unless it's on a valid device.
dyn.dns.he.net uses a self-signed cert, disable verification for it.
Fix gateway widget status update

Redmine #4077
Merge pull request #1366 from phil-davis/patch-1
Use proper listr class for Gateways Widget Status

The Gateways Widget Status was not using the listr class, and so it was missing the borders for the right and bottom of its box.
Use the listr class.
Then use javascript to explicitly set the background-color to match the status, overriding the white that is specified in listr.
Explicitly pass gateway status and color

This code was passing a whole load of html to attempt to set various properties of the Gateways Widget Status column so that it would display the new status (Online, Offline...) and in the appropriate color.
Now that I am using class=listr, the css fro listr already specifies white. Setting bgcolor in HTML does not override that.
Pass both the status text and color as ordinary text, separated by "/". The consumer of this output can do their thing with jQuery to set the color as well as text of the element.
Set text and color of Gateways Widget Status

getstats.php calls functions.inc.php get_stats(), which calls get_gatewaystats().
get_gatewaystats() now returns the text for each field and an optional color separated by "/" - "text/color" e.g. "Online/#90EE90"
Parse the the new format, separating out text and color.
If color is specified, then also set it with jQuery to css.
Merge pull request #1367 from phil-davis/patch-2
Add RELENG_2_2 to gitsync
Fix #4066:

Make sure pf is configured before other services are restarted when WAN
IP changes. The way it was before, 'pass out' rules with route-to still
have old IP set as 'from' and some Dynamic DNS ended up not being
updated.
Call filter_configure_sync() is a better fix for #4066, as pointed by Ermal
Disable RC4 ciphers in lighttpd
Merge remote-tracking branch 'upstream/master'