ok deraadt@ brad@

known DoS attacks, like de-auth flooding against wireless networks.
an example is provided in the manual page.
"or could you just got for it?", deraadt@

"inspired" by deraadt@

fix inspired by and closes pr 4495
ok krw@

can be changed via sysctl's.
ok markus@

client; from amh@POBOX.COM

show how to disable it;
ok deraadt@

spews1 the default.  OK deraadt@

From: Matthias Kilian <kili@outback.escape.de>

with a set skip statement to the same effect, performs way better
suggested by Stuart Henderson <stu@spacehopper.org>, theo ok

from netbsd pr #30872 (anonymous post);
ok deraadt@ krw@

graceful shutdown work correctly.
ok mpf@ deraadt@ a long time ago, committed to local repository by accident.

ok deraadt@

ok deraadt@

prompted by deraadt@ and henning@, ok marco@

ok mickey@

(commented out).

relevant when the dummy ruleset can't be loaded, we still want to enable
pf, otherwise the real ruleset (even if that does load correctly) won't
be active. might happen on a non-GENERIC kernel or after an update (before
/etc is manually updated). reported by Jim Rees. ok frantzen@

ok beck@

- add a `method' capability to the whitelist example
ok beck@

ACPI tables into kernel memory and attach ACPI and HPET timers currently.
In order to test this code, enabling the devices in GENERIC as well as
the ACPI_ENABLE option is needed.  This code does not do any thermal
control yet, so this should be done with care depending on the platform.
In the tree so more people can contribute to making this more fully
featured.
Ok niklas@ grange@ tedu@

necessary for regular carp setups. There are situations where you need this,
but if you're going to use it, think hard about redesigning your network so
you don't have to.
ok deraadt@ mpf@ henning@