fixed dnat_rules