pf's on-the-fly checksum adjustments


the nested pf_cksum_fixup calls are ugly as hell
easy to mix up parameters etc

touching the packet requires calling pf_cksum_fixup
per word!
with old and new word's contents
and knowledge about the cksum to update