MFC 233601:
  Permit tcpdrop in VNET jails.