tunnel: use iptunnel_xmit() again