- Improve wording about enabling sshd.

- Rework wording about ssh tunnels.

Approved by:	ceri@

en_US.ISO8859-1/books/handbook/security/chapter.sgml

@@ -4209,7 +4209,7 @@ ipfw add 1 allow ipencap from W.X.Y.Z to A.B.C.D
       access remote machines securely.  It can be used as a direct
       replacement for <command>rlogin</command>,
       <command>rsh</command>, <command>rcp</command>, and
-      <command>telnet</command>.  Additionally, any other TCP/IP
+      <command>telnet</command>.  Additionally, TCP/IP
       connections can be tunneled/forwarded securely through SSH.
       <application>OpenSSH</application> encrypts all traffic to effectively eliminate eavesdropping,
       connection hijacking, and other network-level attacks.</para>
@@ -4238,9 +4238,11 @@ ipfw add 1 allow ipencap from W.X.Y.Z to A.B.C.D
       </indexterm>
 
       <para>The <application>sshd</application> daemon is enabled by
-        default on &os;&nbsp;4.X and is enabled or not during the
-        installation by the user of &os;&nbsp;5.X.  To see if it is
-        enabled, check the <filename>rc.conf</filename> file for:</para>
+        default on &os;&nbsp;4.X.  In &os; 5.X and later enabling
+        <application>sshd</application> is an option presented during
+        a <literal>Standard</literal> install of &os;.  To see if
+        <application>sshd</application> is enabled, check the
+        <filename>rc.conf</filename> file for:</para>
       <screen>sshd_enable="YES"</screen>
       <para>This will load &man.sshd.8;, the daemon program for <application>OpenSSH</application>,
 	the next time your system initializes.  Alternatively, you can