this patch fixes the signed vs. unsigned bit field problem recently discovered by irwin tillman. http://www.redbarn.org/dns/ratelimits has the pointer to the new code, all of which came from vernon schryver. paul