Move the definition of negate_networks/vpn_networks to its place and re-include ipsec vpns in this tables since scrub for mss clamping need this.
Move the definition of negate_networks/vpn_networks to its place and re-include ipsec vpns in this tables since scrub for mss clamping need this.

phil-davis/pfsense,brunostein/pfsense,dennypage/pfsense,phil-davis/pfsense,dennypage/pfsense,phil-davis/pfsense,NOYB/pfsense,dennypage/pfsense,BlackstarGroup/pfsense,ch1c4um/pfsense,NewEraCracker/pfsense,NOYB/pfsense,BlackstarGroup/pfsense,brunostein/pfsense,ptorsten/pfsense,NewEraCracker/pfsense,pfsense/pfsense,BlackstarGroup/pfsense,BlackstarGroup/pfsense,ch1c4um/pfsense,ch1c4um/pfsense,ptorsten/pfsense,dennypage/pfsense,pfsense/pfsense,brunostein/pfsense,NewEraCracker/pfsense,jxmx/pfsense,ch1c4um/pfsense,ptorsten/pfsense,jxmx/pfsense,NewEraCracker/pfsense,pfsense/pfsense,phil-davis/pfsense,jxmx/pfsense,pfsense/pfsense,NOYB/pfsense