Go back to m_dup() for now.

It seems that somewhere in the IP stack the IP header is being
modified and we end up with invalid header lengths going out
on the wire.

So yeah, we can't do zero-copy bridging until that's taken care of.
Sigh.