Move definition of fw_enable from ip_fw.c to ip_input.c

so we can compile kernels without IPFIREWALL .

Reported-by: Robert Watson
Approved-by: jordan

sys/netinet/ip_fw.c

@@ -73,7 +73,6 @@ static int fw_verbose = 1;
 static int fw_verbose = 0;
 #endif
 int fw_one_pass = 1 ;
-int fw_enable = 1 ;
 #ifdef IPFIREWALL_VERBOSE_LIMIT
 static int fw_verbose_limit = IPFIREWALL_VERBOSE_LIMIT;
 #else

sys/netinet/ip_input.c

@@ -174,6 +174,7 @@ SYSCTL_INT(_net_inet_ip, OID_AUTO, stealth, CTLFLAG_RW,
 /* Firewall hooks */
 ip_fw_chk_t *ip_fw_chk_ptr;
 ip_fw_ctl_t *ip_fw_ctl_ptr;
+int fw_enable = 1 ;
 
 #ifdef DUMMYNET
 ip_dn_ctl_t *ip_dn_ctl_ptr;