ip_fw3_ctl_add_rule
error = ip_fw3_ctl_add_rule(sopt);
int ip_fw3_ctl_add_rule(struct sockopt *sopt);