check_deny
ip_fw3_register_filter_funcs(0, O_BASIC_DENY, (filter_func)check_deny);
void check_deny(int *cmd_ctl, int *cmd_val, struct ip_fw_args **args,