update specs to allow INPUT:nat:IPv4