K 10 svn:author V 4 oleg K 8 svn:date V 27 2009-04-27T17:37:36.446836Z K 7 svn:log V 239 Optimize packet flow: if net.inet.ip.fw.one_pass != 0 and packet was processed by ipfw once - avoid second ipfw_chk() call. This saves us from unnecessary IPFW_RLOCK(), m_tag_find() calls and ip/tcp/udp header parsing. MFC after: 2 month END