Move identd_flags away from the inetd-capable daemons and fix usage.
ok deraadt@

ok deraadt@

ok sthen@ deraadt@

snippet; ok florian@

ok krw@ sthen@ rpe@ halex@ dcoppa@

See faq/current.html for more information.
The local_rcconf variable is not used anywhere anymore so drop it.
suggested by deraadt@
ok sthen@

this file, even years after the rc.conf / rc.conf.local split happened.
One way to improve upon this is to put a big fat comment at the top of
the file.  (Other ways to improve this is by renaming files, but that
will just create more confusion).
ok aja robert

install sample configs to /etc/.
ok claudio deraadt henning mcbride

ok deraadt@ robert@

point of view.
mostly ok sthen@ ajacoutot@, who were discussing the feng shui of the
start_daemons chunk

mostly from Kent R. Spillner
ok sthen@ robert@

with input from and ok sthen@

from ajacoutot@.
ok deraadt ajacoutot

/var/yp/binding does not exist, do _not_ try to start ypbind.
Make it possible to start ypbind the same way as the other daemons
(using ypbind_flags) while preserving the historical startup behavior.
tested by deraadt@

ok deraadt@ robert@

pointed out by Moritz Grimm (mgrimm-at-mrsserver-dot-net)

sthen@ ok.

ok deraadt@

do that if pf is actually enabled (rely on pfctl -si)
requested by deraadt@

ok robert@ deraadt@

rc_pre() functions are returning correctly. This change
also simplyfies the changes because false || return 1 can be replaced
with false if that's the last call. thanks halex@!

ok robert@

ok robert@

switched a while back.
ok miod, kettenis

ok robert@ deraadt@

From now on rc(8) is going to call these scripts to start them up on boot
in the same order than before.
In addition the inetd and rwhod variables in rc.conf are deprecated so that
inetd_flags and rwhod_flags should be used. The old flags are still going
to be used for some time to allow users to switch.
There are more rc modifications to come later so let's put this in so
we can base more work on this.
It is important to mention that you can still keep using rc.local just
like the way you did before, and we have no intention to remove that either.
I'd also like to thank ajacoutot@, halex@, sthen@ and schwarze@ for working
on this with me.

prodded by espie@
ok miod@

ok deraadt@ gilles@

Also copy the generated RSA key for isakmpd into the iked directory;  this
way we share the same RSA key by default.
ok deraadt@ jsg@

It needs to be started before the routing daemons.
In this way every new prefix learnt by them already has a label associated.
discussed with and ok'ed by claudio@

the default setting in rc.conf.
ok deraadt

ok deraadt

turns bombs into flowers, water into beer and eradicts swine flu