Networking

PIPEX compiled by default, enabled via sysctl
gre(4) works with hosts on the same LAN
relayd overhaul (reload support for l7)
support for divert-to in relayd
RFC 3021 /31 subnets supported
ftp-proxy and tftp-proxy now use divert-to
ssh systrace sandboxing of pre-auth priv-sep child