allow_nat modified