Fix #3106, parse 'not' rules right on destination for port forward + reflection proxy rules
Mark input_errors as reference at do_input_validation declaration, it fixes #3108
Optimization has nothing to do with limits