proceed to gate A42 please


ip_output does a lot of stuff skipped for forwarded packets that I ignore here

does the MTU magic, incl. PMTUD, fragmentation if needed, etc
ignored here. it's 1500 everywhere anyway, everything else doesn't matter
yeah yeah your DSL blah

multicast, broadcast, ipsec, ... ignore

calls pf_test() again to let pf do its work