fixes for ipfw