/* * return a policy that matches this particular inbound packet. * XXX slow */