rt
int delete_range(struct ip_fw_chain *chain, ipfw_range_tlv *rt, int *ndel);
int ipfw_match_range(struct ip_fw *rule, ipfw_range_tlv *rt);