Fix broken window replay check that will allow old packet to be accepted.

This was introduced in r309144.

Submitted by:	Jean-Francois HREN <jean-francois.hren@stormshield.eu>
Approved by:	ae@
MFC after:	3 days

sys/netipsec/ipsec.c

@@ -1323,6 +1323,8 @@ ipsec_updatereplay(uint32_t seq, struct secasvar *sav)
 		    __func__, replay->overflow,
 		    ipsec_sa2str(sav, buf, sizeof(buf))));
 	}
+
+	replay->count++;
 	return (0);
 }