MFC r274230:
Pass mbuf to pfil processing before stripping outer IP header as it is described in if_enc(4).