How to tell if firewall is compiled in the kernel or just loaded

[Ernie Luzar]

Using the kldstat command

kldstat -v
kldstat -q -m ipl.ko
or -m ipfilter

It seems that the kernel module name has the .ko suffix and the module 
name of just the prefix. Now here comes along ipfilter. It has a kernel 
name of ipl.ko and a module name of ipfilter. Should the module name be 
ipl instead of ipfilter. Is this a mess up is the kernel compile that 
needs to be fixed in 13.0?

How can tell if ipfilter is loaded or compiled into the kernel?