captive portal: adjust accounting interval to Acct-Interim-Interval
This changes the default interval to 600, which is the recommended
value according to RFC 2869.
Firewall: Migration Assistant: Show migration assistant if at least one Outbound NAT rule exists, remove conditional hiding based on NAT mode
(cherry picked from commit 1aceb823dabc64cfc7098dd48b48f4c0a2e3fd9a)
firewall: skip alias on rules GUI reload
Also align the alias load path in the controller with
how !skip_alias serializes the sequence after rules
reload inside filter_configure_sync().
(cherry picked from commit a3091013d724f19e5fc2767a12de811da606e935)
(cherry picked from commit 5c1d8575a7d87dd717963506b510d144e6fcd63a)
Firewall: NAT: Destination NAT: Add validations for No RDR, prevent target and local-port being set (#10447)
(cherry picked from commit 7914d185d4fbc0faa06572ba205391654df7b589)
Firewall: Rules: Improve interface filter logic to include floating rules with multiple interfaces when they overlap with at least one interface in the interface filter request (#10449)
* Firewall: Rules: Improve interface filter logic to include floating rules with multiple interfaces when they overlap with at least one interface in the interface filter request.
* Improve inverted interface condition, make it symmetric to positive interface match in final else condition
(cherry picked from commit a1d16690c2c34c0a131e70e0ffeee0771f672b0e)
Firewall: Migration Assistant: Show rule counts that can be exported, hide tab if no rules exist (#10395)
(cherry picked from commit f4c040a0c134d73264ebfe932fe6a80e6f3768cf)
mvc: give throwReadOnly() a sibling named throwNotFullAdmin() which validates if a user has full access rights and can be treated as "provides safe input".
Although there aren't a lot of cases where user input can't be validated strictly enough, there are still one or two edge cases which offer some sort of "advanced" input which we currently wouldn't accept and are thus hard to change for historic reasons. The most prominent one is Monit, which allows local commands being executed.
throwNotFullAdmin simply raises an exception and bails before persisting changes to the configuration, which can be set on a per action or controller (internalSaveRequiresAdmin).
(cherry picked from commit 578e025111161ffd03fd3fd0ccdac203be546505)
