ok millert@

reference it rather than /etc/netstart
ok henning@ millert@

now

named and chrooted to /var/named. ok deraadt@

ok deraadt@

ok millert@ fgsch@

are *required*.

by ian@, and much input and mangling from theo.

Kerberos related cleanup.

patch from Yozo TODA <yozo@imit.chiba-u.ac.jp>, deraadt@ ok.

licence in a way that makes ipf not free according to the rules we
established over 5 years ago, at www.openbsd.org/goals.html (and those
same basic rules govern the other *BSD projects too).  Specifically,
Darren says that modified versions are not permitted.  But software
which OpenBSD uses and redistributes must be free to all (be they
people or companies), for any purpose they wish to use it, including
modification, use, peeing on, or even integration into baby mulching
machines or atomic bombs to be dropped on Australia.  Furthermore, we
know of a number of companies using ipf with modification like us, who
are now in the same situation, and we hope that some of them will work
with us to fill this gap that now exists in OpenBSD (temporarily, we
hope).

1) It's one more dependency in /etc/rc
2) It's one more script that starts from /etc/rc (slowdown)
3) We're only going to be starting httpd in /etc/rc anyway (no other
weird operations), so there's no reason to force a change in rc.conf
4) apachectl(8) doesn't mention "startssl" directive
5) Admins can use apachectl to manage httpd regardless of how the
latter was started
Thanks to fgs@ for yelling about this :-)

/etc/rc (PR 1476)

- Add ntpdate and rdate rc knobs
Approved-And-Assisted-By: millert

add commented out entry into sysctl.conf for vfs.nfs.iothreads

when no neighboring router is found (rare case).  this is to conform
strictly to the ND spec.  it is safe to leave it empty.