- npf_config_load: if loading the connections, do not perform any actice
  NAT policy take over or or portmap sharing - just replace them all.
- npf_config_fini: flush with the empty connection database.
- npf_nat_import: fix the stat counter.
Do a fairly mechanical reversion of the locking protocol to that
of revision 1.97.  Add a comment documenting my best guess about
the locking requirements in this subsystem.  Leave the locks
taken solely for stats counter increments in place for now; they
should ultimately go but that is a bigger change.
Add a new build make variable, CONFIGOPTS, which is passed to config(1)
when building kernels.  Revert "mkernel=*" and "mkernels" in favor of
this option.

Diff posted on source-changes-d@, approved by (null).
regen
Only check that the offset < sizeof(struct ip) if nxt != 0, i.e. in the
tcp and udp cases. From kre.
XXX: pullup 7
lua(4): fixed Lua stack size
lua(4): included <sys/param.h> into sys/lua.h
lua(4): fixed require
hardware cursor support
hide the hw cursor when blanking the screen
make the full amount of reserved video memory available to userland
Freshen up the commented-out suggested PKG_PATH a bit.
PR/49437: jmcneill: revert broken changes that broke SIOCGIFCONF (mdnsd uses it)
PR toolchain/9618: add ".d" to MKDEP_SUFFIXES so the depend files are rebuilt
if any of their dependencies (i.e. the files they refer to) are changed.
This allows changes to transitive included headers to be handled properly.
Handle obsolete xen/pae-xen kernel modules; reported by John D. Baker.
 Fix a bug that "vmstat -s" print uvmexp.ncolors incorrectly.
Sort in uvmexp_sysctl's order for readability. No functional change.
Make more functions static

No functional change.