dcmgr,vnet: don't always accept packets from gateway.