o Convert rule numbers and named object indexes to 32-bit
o Convert O_SKIPTO and O_CALL opcodes to use 32-bit rulenum.
o Convert O_CALL's stack and skipto code to handle 32-bit rulenums.
o Add ability to grow maximum number of rules up to IPFW_DEFAULT_RULE.
o Bump default sockopt's version from 0 to 1.
o Convert dynamic states code to use 32-bit rulenums.
o Convert eaction code to use 32-bit types.
o Convert all eaction modules to use 32-bit types.
o Modify ipfw_dyn_rule type and remove all legacy fields.
o Retire FreeBSD 7-11 rule format support.
o Implement "lookup rulenum" opcode.
o Implement table value matching for specific value type in `table(name,valtype=value)' opcode
o Add ability to specify return point from O_CALLRETURN opcode.
o Add "lookup", "tagged" keywords to list of reserverd words to avoid name to port resolving.
o Add ability to generate rtsock messages with log rules
o Add ability to log to specified dst: syslog, rtsock, ipfw0
o Add insntod() and insntoc() macros
o Add ability to keep NAT64LSN states during sets swapping
o Fix several races in NAT64LSN
o Add IP_FW_SKIPTO_CACHE sockopt to enable/disable skipto cache