use pfctlinput instead of ip_ctlinput to hit everyone