netfilter: expectation NAT direction is 32 bit attribute