'RELENG_3_5_0_RELEASE'.

This commit was manufactured to restore the state of the 3.5-RELEASE image.
Releases prior to 5.3-RELEASE are omitting the secure/ and crypto/ subdirs.

     Make mbufs more like kernel mbufs
     Allocate mbufs in buckets rather than individually
     Tidy up (and fix) sockaddr parsing of mib structures
     Parse quotes properly and complain about unbalanced ones
     Allow comments at the end of lines
     Use ioctl(TUNSIFHEAD) on the tun device if possible
     Correct CBCP redials
     Correct cmsghdr handling when passing links
     Don't fork to lose the current session when we're about to exit
     Tell the tun device when we change pid
     Show hex/decimal values rather than ??? for things not understood
     Depricate (but still support) -alias in favour of -nat
     Support DNS0/DNS1 macros, add the ``resolv'' command and dns logging
     Support redial/reconnect properly, and tell the -background parent
     Some constification, staticising, spelling and better diagnostics
     Default carrier behaviour based on the device type
     Differentiate between failing to start a program and the program exiting
     Fix the MP link-passing race by using a local-domain UDP socket
     Add "nat target"
     Fix some timer issues where timers are removed before they are triggered
     Handle pap text messages longer than 255 bytes
     Make -foreground a real option
     Bump version

     physical'').
     Support ``physical'' and ``sync'' logging.
     ``set weight'' -> ``set bandwidth'' and a ``set autoload'' rewrite.
     ``set cd'' and better carrier detection.
     PPPoISDN support (.defined out in the Makefile as it's only
     functional with i4b-00.83.00 or better installed)
     PPPoUDP support
     -alias -> -nat
     Add -foreground and -quiet command lines switches
     Minimum idle timer support
     ``alias port'' range support
     Some alignment wrinkles ironed out
     Support for TUNSIFMODE and TUNSLMODE (if defined)
     Assorted throughput measurement improvements
     ``enable/disable keep-session'' support
     Adjust filter sets built with MYADDR and HISADDR when the IPs change
     Allow forward jumps in filter rules
     Support ospf filtering
     Better handing of ``no number'' CBCP REQs
     Handle file descriptor close-on-exec flags properly before exec()s
     Drop packets received when the current state is wrong
     Expand PROCESSID correctly when executing commands
     Add a new CARRIER phase (this is temporary - 'till ``set dial'' is
     abstracted and made device specific)
     Handle IPCP code rejects
     Support ``deny enddisc''
     Don't moan about group write permissions to ppp.conf
     More verbiage (now I'm making words up) in ``show mp''
     Show the correct `next' values in ``show timer''
     Plus an assortment of other minor changes

     ``set device'' changes
     AFCComp man page description

I haven't merged the port 80/81 changes as they've been
questioned :-/

o Add radius support.
o Add ``alias proxy'' and ``alias pptp'' support.
o Support server-side M$Chap authentication.
o Support client & server-side M$LANMan authentication.
o Support ``!program'' passwords.
o Use pipes only for unidirectional IPC.
o Extend ``set *retries'' commands.
o Don't ResetReq when doing Predictor compression.
o Delay carrier detection by a default of 1 second and implement
  ``set cd''.
o Implement incremental redial timeouts via ``set redial''.
o Don't use hard-coded quotes or brackets in the man page.
o ``random'' redials means 1-30 seconds, not 0-29.
o Close rather than hanging if the peer never responds to auth requests.
o Nuke outstanding authentication request timers when the layer is closed
  unexpectedly.
o Log CCP errors as in the CCP log (not as a WARNING).
o Ensure that all TLU/TLD and TLS/TLF pairs are balanced.
o OR the peers ACCMAP with our own during LCP negotiations.
o Set the interface netmask correctly and show it in ``show ipcp''.
o Drop the correct diagnostic connections and remove the correct local
  domain socket from ``set server''.
o If our config file doesn't exist, moan about that rather than claiming
  that the ``default'' section doesn't exist.

for every machine on every class C or smaller subnet that we
route to.
Add ``set {send,recv}pipe'' for controlling our socket buffer
sizes.
Mention the IP number with the problem in a few error messages.
All submitted by:     Craig Leres <leres@ee.lbl.gov>
Modified slightly by: me

Forgotten by: me

something that can't happen happens or when everyone
needs to know.  ERRORs are only logged when something
unexpected happens.

      See the file README.changes, and re-read the man page.