netfilter: fix compilation error with NAT=n