snat: handle the unlikely case of no chain