libpfct: Return errno from pfctl_add_eth_rule()

If the pfctl_add_eth_rule() ioctl fails return the errno, not the error
returned by ioctl(). That will give us slightly more insight into what
went wrong, because ioctl() would always return -1.

Sponsored by: Rubicon Communications, LLC ("Netgate")