network MCLGETI: network card RX ring auto sizing, backs off on livelock machine still usable under worst DoS ifconfig em0 -inet6 -> no v6 shit on that interface pf on by default improvements in icmp filtering pfsync can deal with active-active now