Default enable udpencap. Add 'disable' sysctl to sysctl.conf. markus@ ok.

src/etc/sysctl.conf

@@ -1,4 +1,4 @@
-#	$OpenBSD: sysctl.conf,v 1.31 2004/02/25 21:30:38 fgsch Exp $
+#	$OpenBSD: sysctl.conf,v 1.32 2004/06/26 04:32:37 ho Exp $
 #
 # This file contains a list of sysctl options the user wants set at
 # boot time.  See sysctl(3) and sysctl(8) for more information on
@@ -11,6 +11,7 @@
 #net.inet.tcp.rfc3390=1		# 1=Enable RFC3390 for TCP window increasing
 #net.inet.esp.enable=0		# 0=Disable the ESP IPsec protocol
 #net.inet.ah.enable=0		# 0=Disable the AH IPsec protocol
+#net.inet.udpencap.enable=0	# 0=Disable ESP-in-UDP encapsulation
 #net.inet.ipcomp.enable=1	# 1=Enable the IPCOMP protocol
 #net.inet.tcp.ecn=1		# 1=Enable the TCP ECN extension
 #ddb.panic=0			# 0=Do not drop into ddb on a kernel panic