fw/host: tame the packet router