Fixed
- IPsec tree now handles dynamic, IPIP and behind-NAT tunnels correctly. The new Peer → Policies tree (v1.43.0) could show a phantom row labelled by IP, "0 policies", or a road-warrior listed by its public IP when peers were auto-generated (IPIP tunnels) or sat behind NAT. Peers and their policies are now matched by name, dynamic peers and policies are included, and several peers sharing one public IP are kept separate instead of merged. Columns relabelled (Remote / Dst, Local / Src) with a "dyn" tag on dynamic entries.