• Remove reference to MS-Windows, because since the last rewrite, the section does not refer to Windows anymore
• Remove reference to IPSEC_ESP kernel option, which does not exist anymore
• Add "device crypto", which is required to compile a kernel with IPSEC
• In the ipsec rc.d script setkey.conf is parsed by setkey, so convert it from shell script to setkey syntax
• Add racoon_enable to the rc.conf section so racoon is started on boot
• The whole section uses the setkey from ipsec-tools so set ipsec_program in rc.conf for consistency

Approved by: remko