[flashboot] A couple of additions for comments..

[Jakob Schlyter]

On 29 aug 2006, at 18.50, Massimo Lusetti wrote:

> BTW i guess if the support for executing ipsecctl[1] (not in your  
> patch)
> at boot has something wrong, why check for -f /etc/ipsec.conf and then
> call ipsecctl -f ${ipsec_rules} which could not be initialized?

fixed in CVS now (will always use /etc/ipsec.conf if IPSEC=yes).
we might consider actually using ipsec_rules & pf_rules as OpenBSD  
does by default, but that is another issue.

	jakob