Revert "netfilter: don't drop packets with offsets pointing outside the packet"

This reverts commit 3c9078a5c0cf9f08c3cfe73b2b191de54de09e00.