limit CGI process execution time to make REDoS attacks less effective;
attack surface pointed out by Sebastien Marie
Fix double free.  ok guenther@
Unbreak when "SRCDIR=."

reported by phessler@
Send and receive UDP syslog packets on the IPv6 socket.
OK henning@
Document square brackets for IPv6 addresses.  From FreeBSD.
OK logan@ henning@
Add Last-Modified: HTTP header.

OK reyk@
Bugfix: make whatis(1) case-insensitive again.
The traditional whatis(1) was case-insensitve and it's still documented
that way, that but apparently got broken with or after the switch.
Set the sensor's status when docking and undocking, not just its value.
With this change sensorsd(8) now correctly detects state changes when
docking and undocking.

ok mlarkin@
sync
remove an uneeded test
ok yasuoka@
Enable rcctl(8).

prodded by deraadt@
sync
fix memory leak in isakmpd

ok gerhard@ (also corrected first version)
Set the default nfsd flags to "-tun 4".  Matches the comment
in rc.conf and the behaviour of the backwards compatibility
code in rc.subr for nfs_server=YES.
ok ajacoutot@
typo; noticed by jmc@ some time ago
Instead of getting a nasty error message from privsep
"syslogd: priv_getaddrinfo: overflow attempt in hostname"
check the host and port length when parsing the config.
OK henning@
don't need this file, only the mod version
disable use of bind in base; in the base use nsd/unbound instead.
a proper & complete bind port will show up.
discussed with many for years
Strip the BIND code down to just building and installing dig, host and nslookup.
pseudo-device crypto was accidentally left for some architectures.