selinux: Better local/forward check in selinux_ip_postroute()