- Use the URL filter to block www.example.com/
- Use "forward to destination" instead of "forward to nat lookup" to use
divert-to instead of rdr-to in PF.

- (ok) is only printed while in interactive mode, but (failed) stays
even for rc if the command fails
ok ajacoutot@

ok schwarze@

While it is a terribly cool idea, it's just awful and since noone has stepped
up to the plate to keep it up with the current vop state, retire it to the
attic.
ok krw@, deraadt@, guenther@, miod@.
comments from jmc@

Pointed out by aja@

ok otto@, aja@

from Piotr Sikora
ok robert@

ARPSEND, ARPCHECK. Drop support for 'media', 'medium' and 'alias'
specifications in dhclient.conf. Old leases still parse but these
options now have no effect.
Be more polite and decline all offers we don't accept. Fix a IMSG
length check.
Many expressions of support at various bars.
ok henning@ deraadt@ beck@

ok robert@

ok ajacoutot@

After discussion with bluhm@, fgsch@, sthen@ and deraadt@
claudio@ and sthen@ ok.

so remove that test condition. Commented by schwarze@, OK ajacoutot@

gets called from rc.local or rc.shutdown
- notify the user if a given operation was successfull or not by appending
the (ok) or (failed) strings to the end of the daemon name
- hide stdout and stdin unless RC_DEBUG=1 is set, otherwise all the function
names will be printed out and all output sent to stdin or stdout
- since from now on rc.subr is taking care of printing out the daemon names
on startup, we don't need to do this from rc.{local,shutdown} anymore
brainkilling work done by me and ajacoutot@, ok ajacoutot@

don't rc_post if rc_stop failed.
"I agree with the direction" sthen@
ok robert@

Use $() constructs as it's safer than ``.
Both req. by deraadt@
Use pkill instead of pgrep in rc_check so that we don't need to fiddle
with redirections in reload.
prodded by schwarze@
ok robert@

ok robert@

rc_stop so scripts don't need to set it.
ok sthen@ (on a much bigger diff) robert@

rc_cmd start/stop actions. This way when rc.d(8) scripts override these
functions, we don't loose rc_{pre,post}.
Add a max 5 secs loop after rc_stop in the rc_cmd top action. This seems
to be a good default for returning to command line only after the daemon
has really stopped. This fixes "restart" for some daemons and allows to
properly stop some others at shutdown time.
Note that this is just a best-effort default, some daemons may need a
lot more time to shutdown but this case is usually handled in the
rc.d(8) script itself and we obviously do not want to hang the shutdown
process.
Call rc_cmd start/stop in restart and _not_ rc_start/rc_stop which can
get overriden in a script.
discussed with and inputs from sthen@ and schwarze@
ok sthen@ robert@

a daemon in the background.
man page tweaks from schwarze@
discussed with an ok schwarze@ robert@

ok robert@ espie@ miod@

by default, adjust comments in sysctl.conf;  ok markus, tedu, djm, miod

prodded by espie@
ok miod@

in a better place to make it more readable.
ok jmc@ and miod@

non-routeable prefixes. While there sort list.
Diff provided by Andre Keller.

time.  We've been summing the one from the previous build (then additional
goo I run has been cleaning it up..)

we run netstart
ok tedu, djm liked it too

in particular a single write will result in a single re-key event,
rather than 64 writes causing 64 re-keys -- wasting the kernel's time.
ok guenther

easily use it in rc scripts instead of copying/pasting the same huge
command lines everywhere.
ok robert@ sthen@

let's use it. If not, then fall back to using daemon.
While here, do some reordering.
"I like this" sthen@, ok robert@

As schwarze@ also stated, this will prevent anyone from calling it
(which would be an error) and makes it clearer that rc.subr is not just
a functions container.
No functionnal change, unless you were calling rc_conf from an rc script
which would have been wrong anyway.
ok schwarze@ robert@

script; instead, rc.subr can call rc_conf itself right after reading in
rc.conf.
from schwarze@ (committing on his behalf)
ok robert@

local_rcconf would get overwritten by flags from the rc script itself.
Based on an original idea and diff from robert@, create an rc_conf
function that we add in the rc_script after the defaults daemon*
variables.
This way we can use defaults variables names in other part of the script
(when defining a specific pexp for instance).
While here, simplify setting up the default daemon variables so that we
don't need to do any substitution in rc_start.
rc scripts must include daemon variables before calling rc_conf. All
other locally modified variables (pexp, rc_reload, local additions...)
must come after.
feedback from and works for sthen@
ok robert@

ok kjell otto miod

ok deraadt

ok sthen@ deraadt@

Also noticed and agreed by eric@
ok robert@

the last su(1) commit

corresponding variable to NO.
e.g.
rc_reload=NO
This will save us the trouble of copying the same rc_reload() function
(or others) all over the tree.
ok robert@