Log message:
Make it easier to build and install packages "unprivileged", where
the owner of all installed files is a non-root user.  This change
affects most packages that require special users or groups by making
them use the specified unprivileged user and group instead.

(1) Add two new variables PKG_GROUPS_VARS and PKG_USERS_VARS to
    unprivileged.mk.  These two variables are lists of other bmake
    variables that define package-specific users and groups.  Packages
    that have user-settable variables for users and groups, e.g. apache
    and APACHE_{USER,GROUP}, courier-mta and COURIER_{USER,GROUP},
    etc., should list these variables in PKG_USERS_VARS and PKG_GROUPS_VARS
    so that unprivileged.mk can know to set them to ${UNPRIVILEGED_USER}
    and ${UNPRIVILEGED_GROUP}.

(2) Modify packages to use PKG_GROUPS_VARS and PKG_USERS_VARS.

Log message:
Update squid pacakge to 2.6.13 (2.6.STABLE13).

Changes to squid-2.6.STABLE13 (11 May 2007)

	- Make sure reply headers gets sent even if there is no body available
	  yet, fixing RealMedia streaming over HTTP issues.
	- Undo an accidental name change of storeUnregisterAbort.
	- Kill an ancient malplaced storeUnregisterAbort call from ftp.c
	- Bug #1814: SSL memory leak on persistent SSL connections
	- Don't log ECONNREFUSED/ECONNABORTED accept failures in cache.log
	- Cosmetic fix: added missing newline in WCCPv2 configuration dump.
	- Ukrainan error messages
	- Convert various error pages from DOS to UNIX text format
	- Bug #1820: COSS assertion failure t->length == MD5_DIGEST_CHARS
	- Clarify the max-conn=n cache_peer option syntax slightly
	- Bug #1892: COSS segfault on shutdown
	- Windows port: fix undefined ECONNABORTED
	- Make refreshIsCachable handle ETag as a cache validator, not
	  only last-modified
	- in_port_t is not portable, use unsigned short instead
	- Fix fs / auth / snmp dependencies
	- Portability: statfs() may reqire #include <sys/statfs.h>

Log message:
Update squid package to 2.6.12.

This fixes a DoS security problem.

	http://www.squid-cache.org/Advisories/SQUID-2007_1.txt

Changes to squid-2.6.STABLE12 (Mar 20 2007)

	- Assertion error on TRACE

Log message:
Update squid to 2.6.11 (squid-2.6.STABLE11).

Changes to squid-2.6.STABLE11 (Mar 17 2007)

	- Bug #1915: assertion failed: client_side.c:4055: "buf != NULL ||
	  !conn->body.request"
	- Handle garbage helper responses better in concurrent protocol format
	- Fix kqueue when overflowing the changes queue
	- Make sure the child worker process commits suicide if it could
	  not start up
	- Don't log short responses at debug level 1
	- Fix bswap16 & bwsap32 error on NetBSD
	- Fix collapsed_forwarding for non-GET requests

Log message:
Update www/squid to squid-2.6.10 (squid-2.6.STABLE10).

Changes to squid-2.6.STABLE10 (Mar  4 2007)

	- Upgrade HTTP/0.9 responses to our HTTP version (HTTP/1.0)
	- various diskd bugfixes
	- In the access.log hierarchy field log the unique peer name
	  instead of the host name
	- unlinkdClose() should be called after (not before) storeDirSync()
	- CLEAN_BUF_SZ was defined, but never used anywhere
	- logging HTTP-request size
	- Fix icmp pinger communication on FreeBSD and other not supporing
	  large dgram AF_UNIX sockets
	- Release objects on swapin failure
	- Bug #1787: Objects stuck in cache if origin server clock in future
	- Bug #1420: 302 responses with an Expires header is always cached
	- Primitive support for HTTP/1.1 chunked encoding, working around
	  broken servers
	- Clean up relations between TCP probing and DNS checks of peers with
	  no known addresses.
	- Fix a minor HTML coding error in ftp directory listings with // in
	  the path
	- Bug #1875, #1420. Cleanup of refresh logics when dealing with
	  non-refreshable content
	- Negotiate authentication fixed again. Broken since STABLE7 by the
	  patch for Bug #1792.
	- Bug #1892: COSS tries to shut down the same directory twice on exit
	- Bug #1908: store*DirRebuildFromSwapLog() ignores some SWAP_LOG_DEL
	  entries
	- Added support for Subversion HTTP request methods MKACTIVITY,
	  CHECKOUT and MERGE.

Log message:
Fix build problem with aufs option on DragonFly.
Reported by PR pkg/35656 by Kimura Fuyuki and applied patch from it.

Log message:
don't complain if the location of the DragonFly header exists.

Log message:
Allow transparent proxy support for PF on DragonFly.

Log message:
Update squid to 2.6.9 (2.6.STABLE9). I deleted DIST_SUBDIR for now.

Changes to squid-2.6.STABLE9 (Jan 24 2007)

	- Bug #1878: If-Modified-Since broken in 2.6.STABLE8
	- Bug #1877 diskd bug in storeDiskdIOCallback()

Changes to squid-2.6.STABLE8 (Jan 21 2007)

	- Bug #1873: authenticateNTLMFixErrorHeader: state 4.
	- Document the https_port vhost option, useful in combination with
	  a wildcard certificate
	- Document the existence of connection pinning / forwarding of NTLM
	  auth and a few other features overlooked in the release notes.
	- Spelling correction of the ssl cache_peer option
	- Add back the optional "accel" http_port option. Makes accelerator
	  mode configurations easier to read.
	- Bug #1872: Date parsing error causing objects to get unexpectedly
	  cached.
	- Cleanup to have the access.log tags autogenerated from enums.h
	- Bug #1783: STALE: Entry's timestamp greater than check time. Clock
	  going backwards?
	- Don't update object timestamps on a failed revalidation.
	- Fix how ftp://user@host URLs is rendered when Squid is built with
	  leak checking enabled

Log message:
Update squid package to 2.6.7 (2.6.STABLE7).

o arp-acl is now supported on NetBSD contributed by Jaromir Dolecek \ 
<jdolecek@>.

Changes to squid-2.6.STABLE7 (Jan 13 2007)

	- Windows port: Fix intermittent build error using Visual Studio
	- Add missing tproxy info from the dump of http port configuration
	- Bug #1853: Support for ARP ACL on NetBSD
	- clientNatLookup(): fix wrong function name in debug messages
	- Convert ncsa_auth man page from DOS to Unix text format.
	- Bug #1858: digest_ldap_auth had some remains of old hash format
	- Correct the select_loops counter when using select(). Was counted twice
	- Clarify the http_port vhost option a bit
	- Fix cache-control: max-stale without value or bad value
	- Bug #1857: Segmentation fault on certain types of ftp:// requests
	- Bug #1848: external_acl crashes with an infinite loop under high load
	- Bug #1792: max_user_ip not working with NTLM authentication
	- Bug #1865: deny_info redirection with authentication related acls
	- Small example on how to use the squid_session helper
	- Bug #1863: cache_peer monitorurl, monitorsize and monitorinterval not working \ 
properly
	- Clarify the transparent http_port option a bit more
	- Bug #1828: squid.conf docutemtation error for proxy_auth digest
	- Bug #1867: squid.pid isn't removed on shutdown