PATCH: ip_input.c, ip_output.c, ipfw.8

Hi

Noted in the BUGS section of the ipfw manual page:

    Packets that match a tee rule should not be immediately accepted, 
but
    should continue going through the rule list.  This may be fixed in a
    later version.

I've needed to get a copy of packets before the firewall potentially
drops them or passes them to dummynet, but I still want the firewall
to process the packets as normal and not just accept them.

Here's a patch to fix the bug.  If all is in order, please commit
it otherwise let me know how and what I should change so that it can
be committed.  It would also be nice if it can be MFC'd.

Ian

--
Ian Freislich