========== LIVE IPFW3_SYNC REACHABILITY CHECK ==========
Guest: DragonFly 6.5-DEVELOPMENT #0 (with-src, INVARIANTS ON)

Evidence:
- ipfw3.ko exists as loadable module
- ip_fw3_sync.c source exists at sys/net/ipfw3_basic/ip_fw3_sync.c
- conf/files entry: "net/ipfw3_basic/ip_fw3_sync.c optional ipfirewall3"
- ip_fw3_ctl_sync_ptr in ipfw3.ko BSS: value = NULL (0x00000000000028f8 B)
- centre_conf, centre_start, centre_test, edge_socket_handler, send_state:
  NOT in ipfw3.ko symbols (NOT compiled into the shipped module)
- ip_fw3.c:133: ip_fw_ctl_t *ip_fw3_ctl_sync_ptr = NULL;
- ip_fw3.c:1125-1126: if (ip_fw3_ctl_sync_ptr != NULL) { error = ip_fw3_ctl_sync_ptr(sopt); }

Root cause: The dispatch pointer ip_fw3_ctl_sync_ptr is initialized to NULL
  and is NEVER assigned anywhere in the source tree. The check at line 1125
  (if != NULL) always evaluates to FALSE, so the sockopt handler never
  dispatches to the sync functions. Additionally, the sync functions
  themselves are not compiled into the shipped ipfw3.ko module.

Conclusion: ipfw3_sync code is DEAD CODE. The sockopt IP_FW_SYNC_* commands
  are never dispatched. The sync functions (centre_conf, centre_test, etc.)
  cannot be reached at runtime.