ipfw_check_rule
error = ipfw_check_rule(r, rsize, ci);
int ipfw_check_rule(struct ip_fw_rule *rule, size_t size,