Fix backwards condition in IP header inspection for TCP tunnels