Drop IPsec packets when interface is down