negated the descriptive sense of "frag" and "-N", which were clearly wrong.
changed instructions (which were bogus in the extreme) for allowing/preventing
outgoing rsh/rlogin, rewording the paragraph so it applies to incoming
connections so it actually both makes sense and tells the truth. It can
be deleted instead if not relevant.
did not change the paragraph about loading multiple rules in one command,
although this operation is now partially supported by loading from a
command file.
I hope I'm not treading on anyone's toes here.
eg: options "SCSI_DELAY=15" should be options SCSI_DELAY=15, as config
knows about the "=" and splits it correctly into key=value for the #defines.
The only options that need quotes are those that have numbers as part of
the actual name, eg: "TUNE_1542" and "COMPAT_IBCS2".
Expand definition of 'established' and 'icmptypes.' Correct examples
which still used the old syntax. Add a pointer to the CERT packet
filtering checklist.