diff --git a/sys/net/ipfw3/ip_fw3.c b/sys/net/ipfw3/ip_fw3.c
--- a/sys/net/ipfw3/ip_fw3.c
+++ b/sys/net/ipfw3/ip_fw3.c
@@ -484,7 +484,7 @@
 	/* foreach rule in chain */
 	for (; f; f = f->next) {
 again:  /* check the rule again*/
-		if (ctx->sets & (1 << f->set)) {
+		if (f->set < 32 && (ctx->sets & (1 << f->set))) {
 			continue;
 		}