IP checksum in pf


ip checksum updating in pf is useless
since ip_output overwrites it anyway

but then there is the bridge case
pf_test called from bridge_{ip,ipsec}

bridge doesn't decrement ttl, no other changes either
so no ip cksum recalculation

solution: bridge behave like a regular output path

checksum offloading complicates matters