I was just curious what the reason is that IPSEC is disabled in pretty
much _all_ the kernel configs that ship with NetBSD, and if it might not
make sense to if not enable it by default, at least provide a GENERIC.IPSEC
(I do see GENERIC.FAST_IPSEC in sys/arch/i386/conf) which folks
can decide to install via sysinst.

I know that pretty much anyone who can figure out IPSEC at this point
can probably build their own kernels :), but I've found myself in
a few situations recently where it would have been convenient to
have the option to install an ipsec-supporting system from sysinst.
If this isn't seen as a desirable thing, I can certainly put it
together on my own, but I was curious as to what the reasoning might
be, since it's clearly pretty consistent across all the ports.

Thanks,
+j

-- 
Jeff Rizzo                                         http://www.redcrowgroup.com/