Fix missing policy in nat/POSTROUTING builtin