Do packets generated by the ipfw host get processed for both input and output or just output? If they are filtered on input, then it seems they can be detected with "in recv any", right?