IPFW_LOOKUP_MASKING
if (IPFW_LOOKUP_MASKING(&cmd->o) == 0 ||
if (IPFW_LOOKUP_MASKING(&cmd->o) != 0 &&
if (IPFW_LOOKUP_MASKING(cmd) == 0) {