with pf.conf.  If no proto is specified tcp is assumed.
dhartmei@ OK

interface optional. Suggested by rdump@river.com.
nat [on [!] <ifname>] from (any | [!] <addr>[/<mask>]) to (any |
[!] <addr>[/<mask>]) -> <addr> [proto (tcp | udp | icmp)]
rdr [on [!] <ifname>] from (any | [!] <addr>[/<mask>]) to (any |
[!] <addr>[/<mask>]) port <a>[:<b>] -> <addr> port <c>[:*]
[proto (tcp | udp | icmp)]

multicast_host/multicast_router settings; this is useful if one
flushes the routing table and re-initializes.
We really need a netconfig tool of sorts.

by ian@, and much input and mangling from theo.

checking if a make build of the entire system still works?  How many
other parts of the tree are now not going to build?  All development
has not stopped until this is fixed.

anymore.

Kerberos related cleanup.

--
Ok'd by deraadt@

fix my previously bogus MAKEDEVs.
If you used pf on a non-i386. the major device number has changed,
and you'll need to recreate /dev/pf
ok theo