'RELENG_3_5_0_RELEASE'.

This commit was manufactured to restore the state of the 3.5-RELEASE image.
Releases prior to 5.3-RELEASE are omitting the secure/ and crypto/ subdirs.

     Make mbufs more like kernel mbufs
     Allocate mbufs in buckets rather than individually
     Tidy up (and fix) sockaddr parsing of mib structures
     Parse quotes properly and complain about unbalanced ones
     Allow comments at the end of lines
     Use ioctl(TUNSIFHEAD) on the tun device if possible
     Correct CBCP redials
     Correct cmsghdr handling when passing links
     Don't fork to lose the current session when we're about to exit
     Tell the tun device when we change pid
     Show hex/decimal values rather than ??? for things not understood
     Depricate (but still support) -alias in favour of -nat
     Support DNS0/DNS1 macros, add the ``resolv'' command and dns logging
     Support redial/reconnect properly, and tell the -background parent
     Some constification, staticising, spelling and better diagnostics
     Default carrier behaviour based on the device type
     Differentiate between failing to start a program and the program exiting
     Fix the MP link-passing race by using a local-domain UDP socket
     Add "nat target"
     Fix some timer issues where timers are removed before they are triggered
     Handle pap text messages longer than 255 bytes
     Make -foreground a real option
     Bump version

     Moan about -alias (but still honour it).
     kldload the tun module if required.
     Add -unit and -foreground command line arguments.
     Support fast-queue configuration.
     Make ``set autoload'' functional.
     Allow GRE packet filtering
     Many bug fixes

     physical'').
     Support ``physical'' and ``sync'' logging.
     ``set weight'' -> ``set bandwidth'' and a ``set autoload'' rewrite.
     ``set cd'' and better carrier detection.
     PPPoISDN support (.defined out in the Makefile as it's only
     functional with i4b-00.83.00 or better installed)
     PPPoUDP support
     -alias -> -nat
     Add -foreground and -quiet command lines switches
     Minimum idle timer support
     ``alias port'' range support
     Some alignment wrinkles ironed out
     Support for TUNSIFMODE and TUNSLMODE (if defined)
     Assorted throughput measurement improvements
     ``enable/disable keep-session'' support
     Adjust filter sets built with MYADDR and HISADDR when the IPs change
     Allow forward jumps in filter rules
     Support ospf filtering
     Better handing of ``no number'' CBCP REQs
     Handle file descriptor close-on-exec flags properly before exec()s
     Drop packets received when the current state is wrong
     Expand PROCESSID correctly when executing commands
     Add a new CARRIER phase (this is temporary - 'till ``set dial'' is
     abstracted and made device specific)
     Handle IPCP code rejects
     Support ``deny enddisc''
     Don't moan about group write permissions to ppp.conf
     More verbiage (now I'm making words up) in ``show mp''
     Show the correct `next' values in ``show timer''
     Plus an assortment of other minor changes

o Add radius support.
o Add ``alias proxy'' and ``alias pptp'' support.
o Support server-side M$Chap authentication.
o Support client & server-side M$LANMan authentication.
o Support ``!program'' passwords.
o Use pipes only for unidirectional IPC.
o Extend ``set *retries'' commands.
o Don't ResetReq when doing Predictor compression.
o Delay carrier detection by a default of 1 second and implement
  ``set cd''.
o Implement incremental redial timeouts via ``set redial''.
o Don't use hard-coded quotes or brackets in the man page.
o ``random'' redials means 1-30 seconds, not 0-29.
o Close rather than hanging if the peer never responds to auth requests.
o Nuke outstanding authentication request timers when the layer is closed
  unexpectedly.
o Log CCP errors as in the CCP log (not as a WARNING).
o Ensure that all TLU/TLD and TLS/TLF pairs are balanced.
o OR the peers ACCMAP with our own during LCP negotiations.
o Set the interface netmask correctly and show it in ``show ipcp''.
o Drop the correct diagnostic connections and remove the correct local
  domain socket from ``set server''.
o If our config file doesn't exist, moan about that rather than claiming
  that the ``default'' section doesn't exist.

exits, it causes a select() exception.
Handle these select() exceptions on link descriptors in pretty
much the same way as loss of carrier rather than dropping out
in confusion.

are done in the same way as command execution.

For example, ``set proctitle USER INTERFACE PROCESSID'' would
be useful in a -direct profile for identifying who's connected.