rc.firewall not executed?

I just noticed that my ipfw rules were not loaded the last time I
rebooted.  My rc.conf is included below - has something changed
recently so that these settings are not enough?  I didn't see anything
relevant in UPDATING.  My /etc/firewall.conf exists and is readable
(and unchanged since 2002).

Kris

----
# $FreeBSD: src/etc/defaults/rc.conf,v 1.156 2002/08/30 13:01:42 hm Exp $
hostname="citusc17.usc.edu"     # Set this!
nisdomainname="cituscdomain"    # Set to NIS domain if using NIS (or NO).
firewall_enable="YES"           # Set to YES to enable firewall functionality
firewall_type="/etc/firewall.conf"      # Firewall type (see /etc/rc.firewall)
sshd_enable="YES"               # Enable sshd
nfs_client_enable="YES"         # This host is an NFS client (or NO).
rpc_lockd_enable="YES"          # Run NFS rpc.lockd needed for client/server.
rpc_statd_enable="YES"          # Run NFS rpc.statd needed for client/server.
rpcbind_enable="YES"            # Run the portmapper service (YES/NO).
ntpd_enable="YES"               # Run ntpd Network Time Protocol (or NO).
nis_client_enable="YES"         # We're an NIS client (or NO).
defaultrouter="128.125.38.254"  # Set to default gateway (or NO).
keyrate="fast"          # keyboard rate to: slow, normal, fast (or NO).
moused_enable="yes"     # Run the mouse daemon.
moused_type="ps/2"      # See man page for rc.conf(5) for available settings.
lpd_enable="YES"                # Run the line printer daemon.
dumpdev="/dev/ad0s1b"   # Device name to crashdump to (or NO).
network_interfaces="lo0 xl0"
ifconfig_xl0="inet 128.125.38.177 netmask 0xffff0000"

named_enable="YES"              # Run named, the DNS server (or NO).
named_program="/usr/sbin/named" # path to named, if you want a different one.
named_flags="-u bind -g bind"   # Flags for named
named_chrootdir="/var/chroot/named" # Chroot directory (or "" not to auto-chroot it)
named_chroot_autoupdate="YES"   # Automatically install/update chrooted
                                # components of named. See /etc/rc.d/named.
named_symlink_enable="YES"      # Symlink /var/run/named.pid and /var/run/ndc
                                # to their chrooted counterparts.

sendmail_enable="YES"
sendmail_flags="-bd"
sendmail_outbound_enable="NO"
sendmail_submit_enable="NO"
sendmail_msp_queue_enable="NO"