FreeBSD 4X

/* kern */
options         IPFILTER
options         IPFILTER_LOG
options         IPFIREWALL
options         IPFIREWALL_VERBOSE
options         IPFIREWALL_VERBOSE_LIMIT=100
# wtf options         IPFIREWALL_DEFAULT_TO_ACCEPT
options         DUMMYNET
options         QUOTA
options         RANDOM_IP_ID
options         TCP_DROP_SYNFIN
options         ICMP_BANDLIM
options         NMBCLUSTERS=81920
options         KVA_PAGES=384

/* sysctl.conf */
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.ip.rtexpire=2
net.inet.ip.rtminexpire=2
kern.maxfiles=32768
kern.maxfilesperproc=32768
kern.ipc.somaxconn=1024
net.inet.tcp.sendspace=8192
net.inet.tcp.recvspace=16384
net.inet.tcp.always_keepalive=1
kern.ps_showallprocs=0

/* rc.conf */
linux_enable="YES"
moused_enable="YES"
nfs_reserved_port_only="YES"
sendmail_enable="NO"
sshd_enable="YES"
usbd_enable="NO"
kern_securelevel_enable="YES"
kern_securelevel="2"
syslogd_flags="-ss"
portmap_enable="NO"
inetd_enable="NO"
accounting_enable="YES"
ntpdate_enable="YES"
ntpdate_program="/usr/sbin/ntpdate"
ntpdate_flags="time.verio.net"
xntpd_enable="YES"
xntpd_program="/usr/sbin/ntpd"
xntpd_flags="-p /var/run/ntpd.pid"
enable_quotas="YES"
check_quotas="YES"
firewall_enable="YES"
firewall_script="/etc/rc.firewall"
firewall_type="client"
firewall_quiet="NO"
firewall_logging="YES"
firewall_flags=""
tcp_extensions="NO"
tcp_keepalive="YES"
icmp_bmcastecho="NO"
icmp_drop_redirect="YES"
icmp_log_redirect="YES"
tcp_drop_synfin="YES"
icmp_bandlim="YES"
clear_tmp_enable="YES"

/* ntp.conf */
server 129.250.35.250 prefer
server 143.232.55.13
peer 132.239.1.1
peer 18.72.0.3
peer 129.7.1.66
driftfile /etc/ntp.drift

/* stable sup */
*default host=cvsup12.freebsd.org
*default base=/usr
*default prefix=/usr
*default delete use-rel-suffix
*default compress src-all
*default release=cvs tag=RELENG_4
src-all

cd /usr/src
make buildworld
make buildkernel
make installkernel
shutdown to single
cd /usr/src
make installworld
mergemaster

/* port shiznit */
cd /usr/ports/sysutils/portupgrade
make install clean
cvsup ports
portsdb -Uu
portversion -l "<"
portupgrade -arR
pkgdb -fu < if its fucked