Drop packets forwarded via TCP if they are too big (CVE-2013-1428).