properly in inline mode:
1. A bug in ipfw_daq_inject() ignores the buf and len arguments that are
passed to it. This prevents Snort inline mode from dropping/rejecting
packets that match "drop" or "reject" rules.
2. Remove DAQ_CAPA_UNPRIV_START from the list of capabilities so that
Snort can run as an unprivileged user when using the IPFW DAQ module.
Tested by myself and Adam Jeanguenat. Received guidance from sthen@.
Both fixes have been sent upstream.