parse_rules
if (parse_rules(filename, &ipsec) < 0) {
int parse_rules(const char *, struct ipsecctl *);