Convert an unspecified destination IP to "any address" in iptables-speak.

Without this, an unspecified IP gets passed to iptables as "-d 0.0.0.0", which
iptables interprets as 0.0.0.0/32, not the expected 0.0.0.0/0, and the rule
never matches any traffic.