A new destination for a forwarded packet might be installed by a pfil hook. It might either be a gateway or a result of change of the destination address in the IP header. In case of a gateway installed by pfil_mbuf_in keep it even if pfil_mbuf_out modifies the destination address.