Does gif w/o IPsec do ipf processing?  What you describe seems broken.

Really, ipf should be able to be applied before and after IPsec, with
separate rulesets, and also separate rules for forwarding and to/from
the host stack from the forwarding layers.   But that's a major
increase in complexity.
-- 
        Greg Troxel <gdt@ir.bbn.com>