Copy stable/9 to releng/9.3 as part of the 9.3-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

MFC r242079:
Remove the IPFIREWALL_FORWARD kernel option and make possible to turn
on the related functionality in the runtime via the sysctl variable
net.pfil.forward. It is turned off by default.

MFC r242082:
Note the removal of the IPFIREWALL_FORWARD kernel option.

MFC r242463:
Remove the recently added sysctl variable net.pfil.forward.
Instead, add protocol specific mbuf flags M_IP_NEXTHOP and
M_IP6_NEXTHOP. Use them to indicate that the mbuf's chain
contains the PACKET_TAG_IPFORWARD tag. And do a tag lookup
only when this flag is set.

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by: re (implicit)

Use the loader.conf example.

Approved by: trhodes (mentor), keramida (mentor)
MFC after: 3 days

- Move available kernel options to SYNOPSIS, describe how to enable ipfw
from within rc.conf.
- Remove IPDIVERT kernel option
- Add notes about IPFIREWALL_DEFAULT_TO_ACCEPT and IPFIREWALL_FORWARD

Reviewed by: ru
Approved by: keramida (mentor), trhodes (mentor)
MFC after: 1 week

Always compile PFIL_HOOKS into the kernel and remove the associated kernel
compile option. All FreeBSD packet filters now use the PFIL_HOOKS API and
thus it becomes a standard part of the network stack.

If no hooks are connected the entire packet filter hooks section and related
activities are jumped over. This removes any performance impact if no hooks
are active.

Both OpenBSD and DragonFlyBSD have integrated PFIL_HOOKS permanently as well.

Note that IPFIREWALL depends on PFIL_HOOKS compiled into the kernel as well.

Submitted by: ceri, simon (mdoc fixes)

mdoc(7) police: scheduled sweep.

Approved by: re

Remove stale information from these two manpage, and point the readers
to the one up-to-date page which is ipfw(8).

MFC after: 3 days

mdoc(7) police: Use the new .In macro for #include statements.

Removed whitespace at end-of-line; no content changes. I simply did
cd src/share; find man[1-9] -type f|xargs perl -pi -e 's/[ \t]+$//'

BTW, what editors are the culprits? I'm using vim and it shows
me whitespace at EOL in troff files with a thick blue block...

Reviewed by: Silence from cvs diff -b
MFC after: 7 days

Document that the IPFW messages are logged via syslogd(8).

mdoc(7) police: split punctuation characters + misc fixes.

remove fullstops from the end of .Xr lines in SEE ALSO sections.

Update @freebsd.org email addresses to @FreeBSD.org as is the
precedent.

Change archie's and my email addresses from Whistle.com to FreeBSD.org

Bring this a bit more up to date.
Remove the entire copy of ip_fw.h and just point readers at it as it
gets out of date..
Add mentions of dummynet and the fwd actions.

Still to do: Whoever did the 'stateful' stuff might mention it..

More mdoc fixes:

Use Dv and Va macros for defined values and variables,
respectively.
Use proper tag lists instead of approximations.
Use Xr for cross-references.
Make illegal sections legal subsections.
Use An and Aq to mark up author names and addresses,
Respectively.

Remove more single-space hard sentence breaks.

Replace the DIAGNOSTICS section and its literal text approximation of
a tag list with a RETURN VALUES section and an ERRORS section
containing a real tag list.

Remove single-space hard sentence breaks. These degrade the quality
of the typeset output, tend to make diffs harder to read and provide
bad examples for new-comers to mdoc.

Fix invalid option name: DIVERT -> IPDIVERT

$Id$ -> $FreeBSD$

Removed occurrences of consecutive repeated words (such as "the the").

Sort cross refereces in section SEE ALSO.

Mention IPFIREWALL_DEFAULT_TO_ACCEPT and it's effect on rule 65535.

Make this file bare a small resemblance to reality again

Requested from: Archie Cobbs (archie@whistle.com)

Fixed missing #include(s) (mostly of <sys/types.h> in synopsis).

Reviewed by: wollman

add missing cvs Id lines.

Remove trailing whitespace.

Don't worry, this is the only one of these I plan on doing :-).

Update a bunch of man pages to use the .Fx macro to specify FreeBSD versions.

A *QUICK* pass through this man page to make it conform to mdoc
standards and to clean up some of the English. The job is
nowhere complete.

This man page would be a good project for someone who knows
something about the firewall software, and would like to
contribute to the documentation effort. Many of the things
in this man page are out of date and do not reflect reality.

Fix some spelling errors.

Fix a bunch of spelling errors in a bunch of man pages.

Add commeent to say that this manpage is out of date
and will be rewwritten..

Move ipfirewall.4 & snp.4 facility manpage
to share/man/man4