IPFW_STATE_TCPSTATES
switch (s->st_state & IPFW_STATE_TCPSTATES) {
if ((s->st_state & IPFW_STATE_TCPSTATES) != BOTH_SYN)