ok chl@ gilles@

Pointed out by ajacoutot@

OK claudio@

- add examples for how to accept mail from external source and for a
specific domain

install sample configs to /etc/.
ok claudio deraadt henning mcbride

ok sthen@

ok kettenis@

There is no reason we couldn't reload|stop a daemon even when _flags is
set to NO.
As a bonus side effect, we can now see usage() on disabled scripts.
discussed with sthen@ and espie@
ok sthen@

can trivially regen the <=4k bit ones.  ok djm@

ok deraadt@ robert@

prompted by deraadt@

to /dev/null.

point of view.
mostly ok sthen@ ajacoutot@, who were discussing the feng shui of the
start_daemons chunk

from robert at peichaer dot org
discussed with and ok halex@

scripts; from robert at peichaer dot org
ok halex@
While here, put the "sanitation" commands in their own block.

such).
from robert at peichaer dot org
modified after a discussion with halex@
ok halex@ robert@

from robert at peichaer dot org
ok halex@

privilege is needed to run rc_check.
In effect this means /etc/rc.d/foobar check can now be run as a regular
user.
Discussed with robert@ during g2k12.
ok todd@

signatures from observation.
ok mikeb@ jsing@ henning@ deraadt@

OK espie@ kettines@

ok robert@

ok robert@

ok ajacoutot@, krw@, deraadt@

initially from robert at peichaer dot org with some enhancement by halex@
ok halex@

out of the box.
ok deraadt@ pirofti@

descriptor starvation, we can crank the default user file descriptor
limits.

preventing them being locally allocated as dynamic ports.
If AMT is configured with the same IP address as the host (and, in
the case of redirection/https ports, if the relevant feature is
enabled), it will steal packets sent to its ports.
ok mikeb@. kettenis@ thinks it's probably a good idea.