ipfw_add_protected_rule
ipfw_add_protected_rule(chain, rule);
int ipfw_add_protected_rule(struct ip_fw_chain *chain, struct ip_fw *rule);