MFC r274230:
  Pass mbuf to pfil processing before stripping outer IP header as it
  is described in if_enc(4).