diff --git a/sys/contrib/ipfilter/netinet/ip_fil.h b/sys/contrib/ipfilter/netinet/ip_fil.h
index 4b3beb8cc60..e7ca49ba928 100644
--- a/sys/contrib/ipfilter/netinet/ip_fil.h
+++ b/sys/contrib/ipfilter/netinet/ip_fil.h
@@ -686,7 +686,6 @@ typedef	struct	frentry {
 	int	fr_ref;		/* reference count */
 	int	fr_statecnt;	/* state count - for limit rules */
 	u_32_t	fr_die;		/* only used on loading the rule */
-	u_int	fr_cksum;	/* checksum on filter rules for performance */
 	/*
 	 * The line number from a file is here because we need to be able to
 	 * match the rule generated with ``grep rule ipf.conf | ipf -rf -''
@@ -754,6 +753,11 @@ typedef	struct	frentry {
 	 */
 	int	fr_namelen;
 	char	fr_names[1];
+	/*
+	 * This must be last and will change after loaded into the kernel.
+	 * XXX: Moving this is career limiting.
+	 */
+	u_int	fr_cksum;	/* checksum on filter rules for performance */
 } frentry_t;
 
 #define	fr_lastpkt	fr_lpu.frp_lastpkt