changed with a sysctl, so note it in sysctl.conf. v6 needs further
testing following discussions on the tech mailing list; rainer@ points
out possible interactions with neighbour discovery which need to be
investigated first.
"go ahead on the v4 part" deraadt@

timeout, either set auto retriggering or start watchdogd(8)...
From Mitja Muzenic.  ok deraadt.

ok claudio@

net.inet.carp.log=1. it is so common to enable carp preemption...
yes! henning@, ok mpf@

ok beck@ kettenis@ norby@

ok deraadt@ brad@

can be changed via sysctl's.
ok markus@

show how to disable it;
ok deraadt@

who have machines that hit swap a lot.  decided after survey of developers,
we found that most turned this on.  ok various

ok ho henning msf

problems noted by fgsch@ and deraadt@

deraadt@ ok.

suggested by deraadt@.

uncommented; niels@ theo@ ok.

add commented out entry into sysctl.conf for vfs.nfs.iothreads

to do this,
1. in sysctl.conf, add these lines:
net.inet6.ip6.forwarding=0
net.inet6.ip6.accept_rtadv=1
2. in hostname.foo, add
rtsol
specifying two or more interfaces with "rtsol" may result in strange
behavior - ipv6 spec does not permit multi-interface node to be autoconfig'ed.

obviously a long day :-X

If you are going to use either of AH or ESP or both, enable these in
/etc/sysctl.conf.  Also correct the IPSec debugging sysctl code, it is now
named net.inet.ip.encdebug.  Some corrected function signatures too.