enable ah & esp by default, now that we trust the code more

src/etc/sysctl.conf

@@ -1,4 +1,4 @@
-#	$OpenBSD: sysctl.conf,v 1.23 2001/06/27 03:20:20 angelos Exp $
+#	$OpenBSD: sysctl.conf,v 1.24 2001/08/07 14:07:47 deraadt Exp $
 #
 # This file contains a list of sysctl options the user wants set at
 # boot time.  See sysctl(3) and sysctl(8) for more information on
@@ -8,8 +8,9 @@
 #net.inet6.ip6.forwarding=1	# 1=Permit forwarding (routing) of packets
 #net.inet6.ip6.accept_rtadv=1	# 1=Permit IPv6 autoconf (forwarding must be 0)
 #net.inet.tcp.rfc1323=0		# 0=disable TCP RFC1323 extensions (for if tcp is slow)
-#net.inet.esp.enable=1		# 1=Enable the ESP IPsec protocol
-#net.inet.ah.enable=1		# 1=Enable the AH IPsec protocol
+#net.inet.esp.enable=0		# 0=Disable the ESP IPsec protocol
+#net.inet.ah.enable=0		# 0=Disable the AH IPsec protocol
+#net.inet.ipcomp.enable=1	# 1=Enable the IPCOMP protocol
 #ddb.panic=0			# 0=Do not drop into ddb on a kernel panic
 #ddb.console=1			# 1=Permit entry of ddb from the console
 #fs.posix.setuid=0		# 0=Traditional BSD chown() semantics