Hi, can someone help to explain how does the user land command `ipfw` pass the rule set into the hook function in the kernel? I assume that it must be hardcoded in somewhere, but I did not find it yet. Best Regards Bycn82