npf_mk_singlerule
error = npf_mk_singlerule(npf, rule, resp, nc->rule_procs, &rl);
error = npf_mk_singlerule(npf, nat, resp, NULL, &rl);
error = npf_mk_singlerule(npf, req, resp, NULL, &rl);