validate this condition and reject multicast traffic on failure.
ok todd@ naddy@

also start ntpd at this time.
discussed with jmc@; ok deraadt@

/root instead of hard links to them.  This way multiuser only changes
a user makes to the to the ones in /root do not screw them over for
getting into single user easily when the have to.
ok millert@

the official assignment by the IANA for the IEEE 802.11f Inter Access
Point Protocol on port 3517 is 802-11-iapp, we use it as an alias.
ok jakob@, deraadt@

ok millert@

ok henning beck

ok deraadt@ mickey@

newsyslog truncates wtmp on a weekly basis; note that the ac stuff
remains commented out as before;
spotted by andreas bihlmaier;
ok deraadt@

ok krw@

but I put it at a different place, watchdogd is really not a network daemon

- do not process mygate for v4 if dhcp
- do not process mygate for v6 if rtsol
this also makes the mygate processing logic more readable
ok krw@

here they'll come back.  deraadt@ ok.

ok deraadt@ mickey@ krw@
same functionality tested/ok'ed by by mickey, brad, matthieu, and me
with this one may now put a v6 IP in /etc/mygate on a separate line from
the v4 default gateway and netstart will do the right thing

ok reyk@

ok krw@

that get copied around a lot. Needs sh(1) max array index bump I
committed earlier. ok todd@ deraadt@

well, so no need to do that on our own in dodisk().  ok todd@ deraadt@

populate ifmstart lines accordingly.
prodded/tested by brad@
ok reyk@

Nice speedup of MAKEDEV on slower archs. ok fries@ deraadt@

ok deraadt@ brad@

known DoS attacks, like de-auth flooding against wireless networks.
an example is provided in the manual page.
"or could you just got for it?", deraadt@

"inspired" by deraadt@

fix inspired by and closes pr 4495
ok krw@

can be changed via sysctl's.
ok markus@