[NET] Move DF check to ip_forward