Major changes:

Major changes:
On the kernel side: removed goto from the main ipfw_chk() switch,
splitted the static and dynamic rules requests, added O_JAIL and O_GID match.
On userland: use the reentrant qsort_r() instead of the heapsort() function,
splitted the static and dynamic rules requests.

Minor changes:
removed debug messages, added comments,
sync with the linux version.