IPFW_RLOCK_ASSERT
IPFW_RLOCK_ASSERT(&V_layer3_chain);
IPFW_RLOCK_ASSERT(chain);
IPFW_RLOCK_ASSERT(ch);