needed and we don't ship it anyway; millert@ ok.

be sure to remove filres before mknod'ing them again.
Also speed up some rm constructs.
Discussed with hugh@

with pf.conf.  If no proto is specified tcp is assumed.
dhartmei@ OK

interface optional. Suggested by rdump@river.com.
nat [on [!] <ifname>] from (any | [!] <addr>[/<mask>]) to (any |
[!] <addr>[/<mask>]) -> <addr> [proto (tcp | udp | icmp)]
rdr [on [!] <ifname>] from (any | [!] <addr>[/<mask>]) to (any |
[!] <addr>[/<mask>]) port <a>[:<b>] -> <addr> port <c>[:*]
[proto (tcp | udp | icmp)]

multicast_host/multicast_router settings; this is useful if one
flushes the routing table and re-initializes.
We really need a netconfig tool of sorts.

by ian@, and much input and mangling from theo.

anymore.

Kerberos related cleanup.

--
Ok'd by deraadt@

fix my previously bogus MAKEDEVs.
If you used pf on a non-i386. the major device number has changed,
and you'll need to recreate /dev/pf
ok theo