Only validate `SEG.SEQ` and `SEG.ACK` when processing a real `SYN`-cache entry. In the `SYN`-cookie case, these conditions are always true, since the `SYN`-cache entry on the stack is constructed from the incoming TCP segment.
No functional change intendedWhile there, fix the logging messages.