IPSEC-AH: fix packet drop