well, so no need to do that on our own in dodisk().  ok todd@ deraadt@

populate ifmstart lines accordingly.
prodded/tested by brad@
ok reyk@

Nice speedup of MAKEDEV on slower archs. ok fries@ deraadt@

ok deraadt@ brad@

known DoS attacks, like de-auth flooding against wireless networks.
an example is provided in the manual page.
"or could you just got for it?", deraadt@

"inspired" by deraadt@

fix inspired by and closes pr 4495
ok krw@

can be changed via sysctl's.
ok markus@

client; from amh@POBOX.COM

show how to disable it;
ok deraadt@

spews1 the default.  OK deraadt@

From: Matthias Kilian <kili@outback.escape.de>

with a set skip statement to the same effect, performs way better
suggested by Stuart Henderson <stu@spacehopper.org>, theo ok

from netbsd pr #30872 (anonymous post);
ok deraadt@ krw@

graceful shutdown work correctly.
ok mpf@ deraadt@ a long time ago, committed to local repository by accident.

ok deraadt@

ok deraadt@

prompted by deraadt@ and henning@, ok marco@

ok mickey@

(commented out).

relevant when the dummy ruleset can't be loaded, we still want to enable
pf, otherwise the real ruleset (even if that does load correctly) won't
be active. might happen on a non-GENERIC kernel or after an update (before
/etc is manually updated). reported by Jim Rees. ok frantzen@